org.grails:grails-dependencies (2.4.0.rc1), org.grails:grails-encoder (2.4.0.rc1) +33 more potentially affected by CVE-2019-12728 via org.grails:grails-core (2.4.0.rc1)

org.grails:grails-core MAVEN version 2.4.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.0.rc1 - org.grails:grails-encoder 2.4.0.rc1 -...

Preparing for Spring Boot 3.0

Spring Boot 2.0 was the first release in the 2.x line and was published on Feburary 28th 2018. Weve just released Spring Boot 2.7 which means that, so far, weve been maintaining the 2.x line for just over 4 years. In total weve published 95 distinct releases over that timeframe! The entire Spring...

This Week in Spring - May 24th, 2022

Hi, Spring fans! Im in Spain for business and not just a little pleasure. Yesterday, my partner, her mother, and I went to Formentera, Spain, a little island off of Ibiza, Spain. It was amazing. Were now in Ibiza, Spain, which is a little island not far from Barcelona, Spain, on the mainland of...

com.ahome-it:ahome-tooling-server-core (>=1.1.5-release, <=1.1.9-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.5-release, <=1.1.9-release) +167 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.1.2.release)

org.springframework.security:spring-security-core MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.5-release...

This Week in Spring - May 17th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! I am in beautiful Barcelona, Spain, this week, ahead of the upcoming Spring I/O show. I just spent a wonderful week in amazing England, meeting old friends, speaking at Devoxx UK, etc. A Bootiful Podcast: EasyMock contributor...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: OSV:GHSA-P4MX-P49M-8RW4...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: GHSA-P4MX-P49M-8RW4...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: OSV:GHSA-G66Q-GRXC-64J3...

com.alibaba.p3c.idea:p3c-common (1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0, <=1.3.6) +65 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (>=5.2.0, <=5.8.1)

net.sourceforge.pmd:pmd-core MAVEN version =5.2.0, =1.0.0, =0.1.0, =0.1.0, =2.14.1, =0.1.0, =1.7.2, =1.4.2, =1.0.0, =1.2.1, =1.2.1, =1.0.0, =1.0.1 and more Source cves: CVE-2019-7722 Source advisory: GHSA-57QJ-79GH-69W8...

com.alibaba.p3c.idea:p3c-common (1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0, <=1.3.6) +30 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (5.5.2)

net.sourceforge.pmd:pmd-core MAVEN version 5.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.alibaba.p3c.idea:p3c-common 1.0.0 - com.alibaba.p3c:p3c-pmd =1.0.0, =0.0.1, =0.0.7 -...

cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1), com.github.springcloud:moss-client-1.x (1.0.1.release) +162 more potentially affected by CVE-2018-1000129 via org.jolokia:jolokia-core (>=1.3.7, <=1.4.0)

org.jolokia:jolokia-core MAVEN version =1.3.7, =0.0.1, =1.2.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =v0.3.3, =v0.3.3, =2.0-beta-1, =2.3.0, =2.7.1 and more Source cves: CVE-2018-1000129 Source advisory: GHSA-HFPG-GQJW-779M...

cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1), com.github.springcloud:moss-client-1.x (1.0.1.release) +162 more potentially affected by CVE-2018-1000129 via org.jolokia:jolokia-core (>=1.3.7, <=1.4.0)

org.jolokia:jolokia-core MAVEN version =1.3.7, =0.0.1, =1.2.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =v0.3.3, =v0.3.3, =2.0-beta-1, =2.3.0, =2.7.1 and more Source cves: CVE-2018-1000129 Source advisory: OSV:GHSA-HFPG-GQJW-779M...

cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1), com.github.springcloud:moss-client-1.x (1.0.1.release) +162 more potentially affected by CVE-2018-1000130 via org.jolokia:jolokia-core (>=1.3.7, <=1.4.0)

org.jolokia:jolokia-core MAVEN version =1.3.7, =0.0.1, =1.2.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =v0.3.3, =v0.3.3, =2.0-beta-1, =2.3.0, =2.7.1 and more Source cves: CVE-2018-1000130 Source advisory: GHSA-RHQJ-4PP8-VVGF...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2017-12972 via com.nimbusds:nimbus-jose-jwt (3.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2017-12974 via com.nimbusds:nimbus-jose-jwt (3.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.3.26.final), io.undertow:undertow-websockets-jsr (1.3.26.final) +9 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.26.final)

io.undertow:undertow-core MAVEN version 1.3.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.26.final - io.undertow:undertow-websockets-jsr 1.3.26.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...