africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-application (>=1.0.0, <=1.2.0) +37016 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (>=2.0.0.release, <=2.7.18)

org.springframework.boot:spring-boot MAVEN version =2.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =4.6.0.0 and more Source cves: CVE-2025-22235 Source advisory: GHSA-RC42-6C7J-7H5R...

au.com.dius.pact.provider:spring (>=4.1.0, <=4.1.6), au.com.dius:pact-jvm-provider-spring (>=4.0.0-beta.1, <=4.0.10) +347 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.16.release)

org.springframework.boot:spring-boot MAVEN version 1.5.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - au.com.dius.pact.provider:spring =4.1.0, =4.0.0-beta.1, =3.6.0-rc.1, =3.6.15 -...

ai.optfor:spring-openai-api (>=0.1.3, <=0.3.25), ai.stapi:arango-axon (>=0.0.1, <=0.0.2) +5670 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (>=3.1.0, <=3.1.12)

org.springframework.boot:spring-boot MAVEN version =3.1.0, =0.1.3, =0.0.1, =0.0.1, =0.0.10, =0.0.10, =0.0.10, =0.0.6, =0.0.6, =0.0.28, =0.0.6, =0.0.7, =0.0.8, =0.0.11, =0.0.6, =1.0.0, =1.4.0 and more Source cves: CVE-2025-22235 Source advisory: OSV:GHSA-RC42-6C7J-7H5R...

ai.optfor:spring-openai-api (>=0.1.3, <=0.3.25), ai.stapi:arango-axon (>=0.0.1, <=0.0.2) +5670 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (>=3.1.0, <=3.1.12)

org.springframework.boot:spring-boot MAVEN version =3.1.0, =0.1.3, =0.0.1, =0.0.1, =0.0.10, =0.0.10, =0.0.10, =0.0.6, =0.0.6, =0.0.28, =0.0.6, =0.0.7, =0.0.8, =0.0.11, =0.0.6, =1.0.0, =1.4.0 and more Source cves: CVE-2025-22235 Source advisory: GHSA-RC42-6C7J-7H5R...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.2.0) +8521 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (>=3.2.0, <=3.2.12)

org.springframework.boot:spring-boot MAVEN version =3.2.0, =0.1.0-beta.1, =0.1.0-beta.2 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-linux-x8664 0.26 -...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.2.0) +8521 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (>=3.2.0, <=3.2.12)

org.springframework.boot:spring-boot MAVEN version =3.2.0, =0.1.0-beta.1, =0.1.0-beta.2 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-linux-x8664 0.26 -...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.28.0) +7690 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (>=3.3.0, <=3.3.10)

org.springframework.boot:spring-boot MAVEN version =3.3.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-22235 Source advisory: GHSA-RC42-6C7J-7H5R...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.28.0) +7690 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (>=3.3.0, <=3.3.10)

org.springframework.boot:spring-boot MAVEN version =3.3.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-22235 Source advisory: OSV:GHSA-RC42-6C7J-7H5R...

cn.jiangzeyin.fast-boot:common-boot (>=1.1.12, <=1.2.39), cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39) +236 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.4.7.release)

org.springframework.boot:spring-boot MAVEN version 1.4.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.1.12, =1.0.3, =1.2.28, =1.1.2, =1.1.2,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.12), ai.houyi:dorado (>=0.0.6, <=0.0.8) +109 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.15.release)

org.springframework.boot:spring-boot MAVEN version 1.5.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter =0.1.10, =0.0.6, =0.0.11,...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.5.19, <=3.5.24), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.19, <=3.6.0-rc.0) +742 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.14.release)

org.springframework.boot:spring-boot MAVEN version 1.5.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.5.19, =3.5.19, =1.1.10, =1.5.14,...

club.zhcs:axe-apm (>=1.5.13, <=1.5.13.2), club.zhcs:axe-sigar (>=1.5.13, <=1.5.13.2) +613 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.13.release)

org.springframework.boot:spring-boot MAVEN version 1.5.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - club.zhcs:axe-apm =1.5.13, =1.5.13, =1.5.13, =1.5.13, =0.0.7.release, =1.0.1,...

com.fastjrun.codeg.apibase:sdkg-apibase-provider (>=3.1, <=3.2.4), com.fastjrun.codeg.example:sdkg-example-provider (>=2.1, <=3.0) +182 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.11.release)

org.springframework.boot:spring-boot MAVEN version 1.5.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.fastjrun.codeg.apibase:sdkg-apibase-provider =3.1, =2.1, =2.0,...

cn.afterturn:easypoi-spring-boot-starter (>=0.1, <=0.1.1), cn.dubby:dubby_blog (>=1.2, <=1.4) +1503 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.8.release)

org.springframework.boot:spring-boot MAVEN version 1.5.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.1, =1.2, =1.1, =1.1, =1.1, =1.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-spring-boot-autoconfigure (>=3.1.0, <=3.6.0), ca.uhn.hapi.fhir:hapi-fhir-spring-boot-starter (>=3.1.0, <=3.6.0) +809 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.6.release)

org.springframework.boot:spring-boot MAVEN version 1.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-spring-boot-autoconfigure =3.1.0, =3.1.0, =1.2, =1.2...

com.gitee.lwydyby:wwmxd-log (>=1.0-release, <=1.0.9-release), com.ifrabbit:spring-boot-starter-data-mybatis (1.0.17.release) +69 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.5.release)

org.springframework.boot:spring-boot MAVEN version 1.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.gitee.lwydyby:wwmxd-log =1.0-release, =0.12.0, =4.7.0, =0.9.6.1, =1.3.3,...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +691 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.4.release)

org.springframework.boot:spring-boot MAVEN version 1.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.0, =1.0, =1.0, =1.0.1, =1.0.0, =a.1.0.0,...

am.ik.blog:blog-domain (>=4.0.2, <=4.2.0), am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0) +806 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.5.2.release)

org.springframework.boot:spring-boot MAVEN version 1.5.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - am.ik.blog:blog-domain =4.0.2, =4.0.0, =2.0.0, =1.0.3, =1.0.0, =0.2.3, =0.2.3,...

com.github.kmbulebu.nicknack:nicknack-server (0.0.4), com.github.relai.vertx.springdata:mod-spring-data (0.5) +44 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.1.5.release)

org.springframework.boot:spring-boot MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.kmbulebu.nicknack:nicknack-server 0.0.4 -...

com.canoo.dolphin-platform:dolphin-platform-server-spring (>=0.6.1, <=0.8.6), com.canoo.dolphin-platform:dolphin-platform-spring-controller-tester (0.8.6) +183 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.2.2.release)

org.springframework.boot:spring-boot MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-server-spring =0.6.1, =0.6.1, =0.1,...