co.paralleluniverse:comsat-spring-boot (0.4.0), co.paralleluniverse:comsat-spring-boot-security (0.4.0) +124 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.4.release)

org.springframework.boot:spring-boot MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.4.0 -...

com.github.jlgrock.snp:client (0.1), com.github.jlgrock.snp:core (0.1) +78 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.2.0.release)

org.springframework.boot:spring-boot MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.jlgrock.snp:client 0.1 - com.github.jlgrock.snp:core 0.1 -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), at.researchstudio.sat:won-matcher (>=0.4, <=0.6) +174 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.17.release)

org.springframework.boot:spring-boot MAVEN version 1.5.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 -...

cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure (1.0.2), cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2) +266 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.21.release)

org.springframework.boot:spring-boot MAVEN version 1.5.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure 1.0.2 -...

com.github.microwww:mocker-redis-spring-boot-autoconfigure (>=0.0.1, <=3.0.0), com.github.microwww:mocker-redis-spring-boot-starter (>=0.0.1, <=3.0.2-2.8) +79 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.0.release)

org.springframework.boot:spring-boot MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.microwww:mocker-redis-spring-boot-autoconfigure =0.0.1, =0.0.1,...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), cn.bestwu:starter-logging (>=0.1.6-v1, <=1.0.0) +867 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.5.10.release)

org.springframework.boot:spring-boot MAVEN version 1.5.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =1.0.1,...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.djl.spring:djl-spring-boot-starter-autoconfigure (>=0.2, <=0.5) +13499 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (>=2.0.0.release, <=2.2.10.release)

org.springframework.boot:spring-boot MAVEN version =2.0.0.release, =4.4.0.0, =0.2, =0.2, =0.2, =0.2, =0.2, =0.2, =0.0.12, =0.1.2, =0.0.22, =0.0.22, =0.0.22, =0.0.47, =0.0.51 and more Source cves: CVE-2022-27772 Source advisory: OSV:GHSA-CM59-PR5Q-CW85...

cn.jiangzeyin.fast-boot:common-boot (>=1.1.12, <=1.2.39), cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39) +236 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.4.7.release)

org.springframework.boot:spring-boot MAVEN version 1.4.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.1.12, =1.0.3, =1.2.28, =1.1.2, =1.1.2,...

org.springframework.boot:spring-boot-actuator (1.1.0.release), org.springframework.boot:spring-boot-autoconfigure (1.1.0.release) +29 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.0.release)

org.springframework.boot:spring-boot MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - org.springframework.boot:spring-boot-actuator 1.1.0.release -...

com.github.kmbulebu.nicknack:nicknack-server (0.0.4), com.github.relai.vertx.springdata:mod-spring-data (0.5) +44 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.5.release)

org.springframework.boot:spring-boot MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.kmbulebu.nicknack:nicknack-server 0.0.4 -...

am.ik.home:uaa-server (>=1.0.0, <=1.2.0), cn.chendahai:rocketmq-console-alarm (1.0.3) +335 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.4.3.release)

org.springframework.boot:spring-boot MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - am.ik.home:uaa-server =1.0.0, =1.0, =1.0.1, =3.0.1.3, =3.0.1.9, =3.0.1.9, =3.0....

com.github.hengboy:micro-job-autoconfigure (0.0.3.release), com.github.hengboy:micro-job-registry-nacos (0.0.3.release) +9 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (0.8.2)

com.alibaba.nacos:nacos-client MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.github.hengboy:micro-job-autoconfigure 0.0.3.release -...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0-rc1, <=0.2.1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0-rc1, <=0.2.1) +3 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (0.2.1-rc1)

com.alibaba.nacos:nacos-client MAVEN version 0.2.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.3, <=0.2.3), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.3, <=0.2.3) +63 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (1.1.3)

com.alibaba.nacos:nacos-client MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.3, =0.1.3, =2.7.7, =1.0.0, =1.0.0, =1.0.0,...

com.lframework:cloud-starter (>=3.1.0, <=4.1.1), com.yomahub:liteflow-rule-nacos (>=2.9.1, <=2.16.3.1) +7 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (1.4.4)

com.alibaba.nacos:nacos-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.lframework:cloud-starter =3.1.0, =2.9.1, =1.0.0-release, =1.0.2, =1.0.1, =1.10.5-m1, =1.10.2-m2...

Mini-Tmall security vulnerability

Mini-Tmall is a Spring Boot-based mini-Tmall mall , fast deployment run , suitable for use as a Bijou template . A security vulnerability exists in Mini-Tmall v1.0. An attacker exploits the vulnerability to perform an insecure privilege attack via tomcat-embed-jasper...

This Week in Spring - July 5th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! This weeks all sorts of weird for me. Its Tuesday! But here in the US we just celebrated the 4th of July, and I, like many Americans, took a long weekend. Took some time with the family to do a little road trip up north to...

spring-boot:BasicJsonParserFuzzer: Uncaught exception in org.springframework.boot.json.BasicJsonParser.parseMapInternal

Project: https://github.com/spring-projects/spring-boot.git Detailed Report: https://oss-fuzz.com/testcase?key=4818899018842112 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: BasicJsonParserFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Uncaught exception...

This Week in Spring - June 28th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! Im writing this from the Big Apple, New York City! Im here for the SpringOne Tour 2022 NYC event. This is my first time back in New York City since before the pandemic and it has been so much fun. Ive been catching up with...

org.bitbucket.swattu:datastore-utils (>=4.0.32, <=4.0.63), org.bitbucket.swattu:lock-utils (>=4.0.32, <=4.0.63) +4 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.bitbucket.swattu:datastore-utils =4.0.32, =4.0.32,...