io.oasp.java.modules:oasp4j-batch (>=1.5.0, <=2.6.1), org.springframework.batch:spring-batch-integration (>=3.0.0.release, <=3.0.8.release) +29 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.5.release)

org.springframework:spring-messaging MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - io.oasp.java.modules:oasp4j-batch =1.5.0, =3.0.0.release, =1.1.0.release,...

org.springframework.batch:spring-batch-integration (3.0.9.release), org.springframework.boot:spring-boot-starter-integration (>=1.1.11.release, <=1.1.12.release) +27 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.9.release)

org.springframework:spring-messaging MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.springframework.batch:spring-batch-integration 3.0.9.release -...

cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2), com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.1.release) +53 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.3.24.release)

org.springframework:spring-messaging MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp 1.0.2 -...

com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20) +147 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.29.release)

org.springframework:spring-beans MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate =2.3.12,...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dev-tools:ai-devtools (>=0.1.12, <=0.1.20) +26830 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (>=5.0.0.release, <=5.2.21.release)

org.springframework:spring-beans MAVEN version =5.0.0.release, =4.4.0.0, =0.1.12, =0.2, =0.2, =0.2, =0.2, =0.2, =0.2, =0.5, =0.0.12, =0.0.12, =0.1.2, =0.0.22, =0.0.22, =0.0.51 and more Source cves: CVE-2022-22970 Source advisory: OSV:GHSA-HH26-6XWR-GGV7...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2022-25767 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2022-25767 Source advisory: GHSA-W39X-CHVM-PJ3C...

com.yahoo.elide:elide-spring-boot-starter (6.1.3), com.yahoo.elide:elide-standalone (6.1.3) potentially affected by CVE-2022-24827 via com.yahoo.elide:elide-datastore-aggregation (6.1.3)

com.yahoo.elide:elide-datastore-aggregation MAVEN version 6.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.yahoo.elide:elide-datastore-aggregation and may be impacted: - com.yahoo.elide:elide-spring-boot-starter 6.1.3 -...

com.yahoo.elide:elide-spring-boot-starter (6.1.3), com.yahoo.elide:elide-standalone (6.1.3) potentially affected by CVE-2022-24827 via com.yahoo.elide:elide-datastore-aggregation (6.1.3)

com.yahoo.elide:elide-datastore-aggregation MAVEN version 6.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.yahoo.elide:elide-datastore-aggregation and may be impacted: - com.yahoo.elide:elide-spring-boot-starter 6.1.3 -...

com.yahoo.elide:elide-spring-boot-starter (6.1.3), com.yahoo.elide:elide-standalone (6.1.3) potentially affected by CVE-2022-24827 via com.yahoo.elide:elide-datastore-aggregation (6.1.3)

com.yahoo.elide:elide-datastore-aggregation MAVEN version 6.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.yahoo.elide:elide-datastore-aggregation and may be impacted: - com.yahoo.elide:elide-spring-boot-starter 6.1.3 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (j11.2.6.0) +1765 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=2.6.0, <=2.6.5)

org.springframework.boot:spring-boot-starter-web MAVEN version =2.6.0, =4.4.0.2, =1.2.5.release, =0.1.2, =5.7.7, =5.7.7, =5.7.7, =1.0.0, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2022-22965 Source advisory: MEND:CVE-2022-22965...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +12682 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=1.0.0.release, <=2.5.11)

org.springframework.boot:spring-boot-starter-web MAVEN version =1.0.0.release, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =greenwich.sr2.1 and more Source cves: CVE-2022-22965 Source advisory:...

ai.ylyue:yue-library-webflux (j11.2.6.0), ca.gc.cyber.ops:assemblyline-java-client (>=1.7, <=1.8) +335 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-webflux (>=2.6.0, <=2.6.5)

org.springframework.boot:spring-boot-starter-webflux MAVEN version =2.6.0, =1.7, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =0.2.2, =1.1.3, =1.1.3, =3.12.0, =1.4.6, =0.1.0, =1.2.0 and more Source cves: CVE-2022-22965 Source advisory: MEND:CVE-2022-22965...

africa.absa:inception-application (>=1.0.0, <=1.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +1215 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-webflux (>=2.0.0.release, <=2.5.11)

org.springframework.boot:spring-boot-starter-webflux MAVEN version =2.0.0.release, =1.0.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =2.1.2.release, =1.3, =0.5.0, =3.1.37, =3.1.13, =3.1.85, =3.1.13, =3.1.13, =3.1.295 - ch.mobi.mobitor:mobitor-doc 3.1.13 and more Source cves: CVE-2022-22965 Source...

it.ozimov:spring-boot-email-core (0.3.0), it.ozimov:spring-boot-email-tools (0.2.0) +25 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.3.4.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - it.ozimov:spring-boot-email-core 0.3.0 -...

club.zhcs:axe-swagger (>=1.5.13, <=1.5.13.2), club.zhcs:axe-validation (>=1.5.13, <=1.5.13.2) +368 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.13.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - club.zhcs:axe-swagger =1.5.13, =1.5.13, =0.0.7.release...

com.github.mkopylec:charon-spring-boot-starter (>=2.4.0, <=2.5.0), com.github.ulisesbocchio:spring-boot-security-saml (>=1.14, <=1.15) +77 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.11.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.github.mkopylec:charon-spring-boot-starter =2.4.0,...

ch.sbb.releasetrain:jsfbootadapter (0.0.25), ch.sbb.releasetrain:webui (0.0.25) +138 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.3.6.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - ch.sbb.releasetrain:jsfbootadapter 0.0.25 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (j11.2.6.0) +1765 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=2.6.0, <=2.6.5)

org.springframework.boot:spring-boot-starter-web MAVEN version =2.6.0, =4.4.0.2, =1.2.5.release, =0.1.2, =5.7.7, =5.7.7, =5.7.7, =1.0.0, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2022-22965 Source advisory: GHSA-36P3-WJMG-H94X...

io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr2), io.fabric8:process-spring-boot-itests-service-invoicing (1.1.0.cr2) +11 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.1.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing 1.1.0.c...

com.deviceatlas:deviceatlas-spring-mobile-extension (0.1.0), com.github.wnameless.spring:spring-routing-resolver (0.1.0) +46 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.2.7.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.deviceatlas:deviceatlas-spring-mobile-extension 0.1...