cn.patterncat:event-trace-client (>=1.0.0, <=1.3.0), cn.patterncat:job-common (>=0.0.2, <=0.0.3) +148 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.4.6.release)

org.springframework.boot:spring-boot MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.patterncat:event-trace-client =1.0.0, =0.0.2, =0.0.2, =0.0.1, =0.0.1, =0.0.1...

br.com.ideotech:draw-out-spring-boot-aop (>=1.5.19.release, <=1.5.19-4.release), br.com.ideotech:draw-out-spring-boot-lib (>=1.5.19.release, <=1.5.19-4.release) +267 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.19.release)

org.springframework.boot:spring-boot MAVEN version 1.5.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - br.com.ideotech:draw-out-spring-boot-aop =1.5.19.release, =1.5.19.release,...

io.fabric8:process-spring-boot-container (1.1.0.cr2), io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr2) +40 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.1.release)

org.springframework.boot:spring-boot MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - io.fabric8:process-spring-boot-container 1.1.0.cr2 -...

ca.uhn.hapi.fhir:hapi-fhir-spring-boot-autoconfigure (>=3.1.0, <=3.6.0), ca.uhn.hapi.fhir:hapi-fhir-spring-boot-starter (>=3.1.0, <=3.6.0) +809 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.6.release)

org.springframework.boot:spring-boot MAVEN version 1.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-spring-boot-autoconfigure =3.1.0, =3.1.0, =1.2, =1.2...

com.fastjrun.codeg.apibase:sdkg-apibase-provider (>=3.1, <=3.2.4), com.fastjrun.codeg.example:sdkg-example-provider (>=2.1, <=3.0) +182 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.11.release)

org.springframework.boot:spring-boot MAVEN version 1.5.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.fastjrun.codeg.apibase:sdkg-apibase-provider =3.1, =2.1, =2.0,...

com.github.attt:archer-spring-autoconfigure (1.0-rc1), com.github.attt:archer-spring-boot-starter (1.0-rc1) +23 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.0.0.release)

org.springframework.boot:spring-boot MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.attt:archer-spring-autoconfigure 1.0-rc1 -...

com.aol.microservices:micro-boot (>=0.64, <=0.72), com.deviceatlas:deviceatlas-spring-mobile-extension (0.1.0) +146 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.7.release)

org.springframework.boot:spring-boot MAVEN version 1.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.aol.microservices:micro-boot =0.64, =1.17, =1.25.1-release, =0.1, =1.0,...

com.adobe.api.platform:launchpad (>=1.1.11, <=1.2.1), com.adobe.api.platform:launchpad-test-support (>=1.1.11, <=1.2.1) +105 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.1.release)

org.springframework.boot:spring-boot MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.adobe.api.platform:launchpad =1.1.11, =1.1.11, =1.1.16, =0.53.1, =0.1.5,...

com.erudika:para (1.8.0), com.github.totyumengr:minicubes-cluster (0.2) +55 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.4.release)

org.springframework.boot:spring-boot MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.erudika:para 1.8.0 - com.github.totyumengr:minicubes-cluster 0.2 -...

com.github.advantageous:qbit-spring (>=0.9.1-rc11, <=0.9.2-rc14), com.github.jmgilmour:parker-spring-boot (0.1.0) +165 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.6.release)

org.springframework.boot:spring-boot MAVEN version 1.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.advantageous:qbit-spring =0.9.1-rc11, =2.0.1, =2.2.29, =1.0.4, =1.0....

com.definesys.mpaas:query-weblogic (1.0.0), io.github.sethdeveloper:fixed-asset-engine (>=0.1.4-jdk8-m2, <=0.2.3-monthly-daily-depre-jdk8) +30 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.12.release)

org.springframework.boot:spring-boot MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.definesys.mpaas:query-weblogic 1.0.0 -...

GHSA-CM59-PR5Q-CW85 Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. The vulnerable method is used to create a work directory for embedd...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=3.3.0), co.paralleluniverse:comsat-spring-boot (0.5.0) +251 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.5.release)

org.springframework.boot:spring-boot MAVEN version 1.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =1.5.0, =2.0.2, =2.0.3, =2.0.2,...

com.vilt-group.minium:minium-app (0.9.6), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +36 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.7.release)

org.springframework.boot:spring-boot MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.vilt-group.minium:minium-app 0.9.6 - de.codecentric:jbehave-admin-server...

com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3), com.erudika:para (>=1.3.0, <=1.7.0) +37 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.0.2.release)

org.springframework.boot:spring-boot MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.blitline:blitline-image-client-example =0.10.1, =1.3.0, =1.1.0.beta5,...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.5.19, <=3.5.24), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.19, <=3.6.0-rc.0) +742 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.14.release)

org.springframework.boot:spring-boot MAVEN version 1.5.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.5.19, =3.5.19, =1.1.10, =1.5.14,...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.4-rc.0, <=3.5.18) +672 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.4.2.release)

org.springframework.boot:spring-boot MAVEN version 1.4.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.4.0, =3.5.4-rc.0, =0.9.0, =1.1,...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.9), co.fingerprintsoft:notification-spring-boot-starter (1.0.9) +222 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.3.7.release)

org.springframework.boot:spring-boot MAVEN version 1.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.9 -...

org.grails:grails-gsp-spring-boot (1.0.0), org.springframework.boot:spring-boot-actuator (1.1.11.release) +29 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.11.release)

org.springframework.boot:spring-boot MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - org.grails:grails-gsp-spring-boot 1.0.0 -...

com.canoo.dolphin-platform:dolphin-platform-server-spring (>=0.6.1, <=0.8.6), com.canoo.dolphin-platform:dolphin-platform-spring-controller-tester (0.8.6) +183 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.2.release)

org.springframework.boot:spring-boot MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-server-spring =0.6.1, =0.6.1, =0.1,...