3144 matches found
This Week in Spring - August 23rd, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! Weve got a ton to cover, so lets dive right into it! A Bootiful Podcast: Flowable founder Joram Barrez on a Bootiful Podcast on workflow, business process management, and more Building IoT Applications Using Fauna and Spring...
kkFileView Cross-Site Script Vulnerability
Keking kkFileView is a Spring-Boot project for online previewing of documents by Keking Technology Keking. A cross-site scripting vulnerability exists in kkFileView v4.1.0, which originates from multiple cross-site scripts in the urls and currentUrl parameters of the...
Introducing Experimental Spring Support for Apache Pulsar
We are happy to announce that we are incubating a new experimental Spring project for Apache Pulsar. This project aims to provide Spring-friendly APIs, building blocks, and programming models for writing Java applications that interact with Apache Pulsar. Apache Pulsar is a popular messaging syst...
io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.1.7.final)
io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...
io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.1.9.final)
io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...
io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.3.28.final)
io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...
A Bootiful Podcast: Observability guru Jonatan Ivanov on the future of observability in Spring Boot
Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Spring observability guru Jonatan Ivanov @jonatanivanov...
This Week in Spring - August 1st, 2022
Aloha, Spring fans! Welcome to another installment of This Week in Spring! Im still on vacation on the beautiful island of Maui, Hawaii, but I wanted to say hello "aloha!" and share this weeks latest roundup of all thats good and glorious in the wide and wonderful world of Springdom. Funny thing,...
How to integrate Hibernates Multitenant feature with Spring Data JPA in a Spring Boot application
For quite some time now, Hibernate has offered a Multitenant feature. It integrates nicely with Spring, but there is not much information about how to actually set it up, so I thought an example or two or three could help. There is already an excellent blog article, but it is a little dated and i...
spring-boot:BasicJsonParserFuzzer: Uncaught exception in org.springframework.boot.json.BasicJsonParser.parseMapInternal
Project: https://github.com/spring-projects/spring-boot.git Detailed Report: https://oss-fuzz.com/testcase?key=4583852512772096 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: BasicJsonParserFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Uncaught exception...
This Week in Spring - July 26th, 2022
Aloha, Spring fans! Im on vacation, reporting to you from the paradise-like island of Maui, Hawaii, and hoping that youre having a wonderful day! My family and I love Hawaii. Its brimming with beauty and serenity, and while the island of Maui, in the state of Hawaii, is very small, the islands ar...
io.github.talelin:lin-cms-spring-boot-autoconfigure (>=0.0.1-rc1, <=0.2.0-release), io.github.talelin:lin-cms-spring-boot-starter (>=0.0.1-rc1, <=0.2.0-release) potentially affected by CVE-2022-32430 via io.github.talelin:lin-cms-core (>=0.0.1-rc2, <=0.2.0-release)
io.github.talelin:lin-cms-core MAVEN version =0.0.1-rc2, =0.0.1-rc1, =0.0.1-rc1, =0.2.0-release Source cves: CVE-2022-32430 Source advisory: OSV:GHSA-Q72P-4W56-HX7H...
io.github.talelin:lin-cms-spring-boot-autoconfigure (>=0.0.1-rc1, <=0.2.0-release), io.github.talelin:lin-cms-spring-boot-starter (>=0.0.1-rc1, <=0.2.0-release) potentially affected by CVE-2022-32430 via io.github.talelin:lin-cms-core (>=0.0.1-rc2, <=0.2.0-release)
io.github.talelin:lin-cms-core MAVEN version =0.0.1-rc2, =0.0.1-rc1, =0.0.1-rc1, =0.2.0-release Source cves: CVE-2022-32430 Source advisory: GHSA-Q72P-4W56-HX7H...
Hardcoded JWT Token in Lin CMS Spring Boot
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...
GHSA-Q72P-4W56-HX7H Hardcoded JWT Token in Lin CMS Spring Boot
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...
CVE-2022-32430
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...
CVE-2022-32430
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...
Design/Logic Flaw
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application...
