com.ueboot:ueboot-generator (2.2.0), com.ueboot:ueboot-shiro (2.2.0) +13 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.6.15.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.ueboot:ueboot-generator 2.2.0 - com.ueboot:ueboot-shir...

com.github.zhycn:xbird-starter-swagger2 (>=1.0.0, <=1.3.0), com.heapbrain:testdeed (>=1.2.6, <=1.3.2) +11 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.6.9.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.zhycn:xbird-starter-swagger2 =1.0.0, =1.2.6,...

com.github.zhycn:xbird-starter-swagger2 (>=1.0.0, <=1.3.0), com.heapbrain:testdeed (>=1.2.6, <=1.3.2) +11 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.6.9.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.zhycn:xbird-starter-swagger2 =1.0.0, =1.2.6,...

Remote Code Execution (RCE)

org.springframework.cloud: spring-cloud-skipper-server is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to improper validation of upload requests, allowing a malicious user with access to the Skipper server API to write an arbitrary file to any location on the file...

org.springframework.cloud:spring-cloud-dataflow-docs (1.3.0.release), org.springframework.cloud:spring-cloud-dataflow-rest-client (1.3.0.release) +21 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.0.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-docs...

org.springframework.cloud:spring-cloud-skipper-autoconfigure (1.0.3.release), org.springframework.cloud:spring-cloud-skipper-client (1.0.3.release) +8 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.3.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-skipper-autoconfigur...

org.springframework.cloud.task.app:composedtaskrunner-task (>=1.1.1.release, <=2.0.0.release), org.springframework.cloud.task.app:spring-cloud-starter-task-composedtaskrunner (>=1.1.1.release, <=2.0.0.release) +26 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.4.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud.task.app:composedtaskrunner-task...

org.springframework.cloud:spring-cloud-dataflow-docs (>=1.5.1.release, <=1.5.2.release), org.springframework.cloud:spring-cloud-dataflow-rest-client (>=1.5.1.release, <=1.5.2.release) +23 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.5.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-docs...

org.springframework.cloud:spring-cloud-skipper-autoconfigure (1.0.6.release), org.springframework.cloud:spring-cloud-skipper-client (1.0.6.release) +8 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.6.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-skipper-autoconfigur...

org.springframework.cloud:spring-cloud-dataflow-classic-docs (>=1.6.1.release, <=1.6.3.release), org.springframework.cloud:spring-cloud-dataflow-docs (>=1.6.1.release, <=1.6.3.release) +24 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.9.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-classic-doc...

org.springframework.cloud:spring-cloud-skipper-autoconfigure (1.0.10.release), org.springframework.cloud:spring-cloud-skipper-client (1.0.10.release) +8 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.10.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-skipper-autoconfigu...

org.springframework.cloud:spring-cloud-dataflow-classic-docs (1.7.1.release), org.springframework.cloud:spring-cloud-dataflow-docs (1.7.1.release) +21 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.1.1.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-classic-doc...

org.springframework.cloud:spring-cloud-skipper-autoconfigure (1.1.3.release), org.springframework.cloud:spring-cloud-skipper-client (1.1.3.release) +8 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.1.3.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-skipper-autoconfigur...

com.backbase.oss:scdf-maven-plugin (0.2.0), org.springframework.cloud.stream.app:spring-cloud-starter-stream-sink-task-launcher-dataflow (>=1.0.1.release, <=1.1.4.release) +39 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (>=2.0.0.release, <=2.11.3)

org.springframework.cloud:spring-cloud-skipper MAVEN version =2.0.0.release, =1.0.1.release, =einstein.sr3, =1.0.1.release, =1.0.1.release, =2.1.0.release, =2.1.0.release, =elston.release, =2.11.0, =2.0.0.release, =2.0.0.release, =2.0.0.release, =2.11.3 -...

org.springframework.cloud:spring-cloud-dataflow-docs (>=1.3.1.release, <=1.4.1.release), org.springframework.cloud:spring-cloud-dataflow-rest-client (>=1.3.1.release, <=1.4.1.release) +21 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.1.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-docs...

org.springframework.cloud:spring-cloud-skipper-autoconfigure (1.0.2.release), org.springframework.cloud:spring-cloud-skipper-client (1.0.2.release) +8 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.2.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-skipper-autoconfigur...

org.springframework.cloud:spring-cloud-skipper-autoconfigure (1.0.7.release), org.springframework.cloud:spring-cloud-skipper-client (1.0.7.release) +8 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.7.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-skipper-autoconfigur...

org.springframework.cloud:spring-cloud-dataflow-classic-docs (1.6.0.release), org.springframework.cloud:spring-cloud-dataflow-docs (1.6.0.release) +24 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.8.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-classic-doc...

org.springframework.cloud.stream.app:spring-cloud-starter-stream-sink-task-launcher-dataflow (1.0.0.release), org.springframework.cloud.stream.app:spring-cloud-stream-app-starters-docs (>=einstein.release, <=einstein.sr2) +31 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.1.0.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: -...

org.springframework.cloud:spring-cloud-dataflow-classic-docs (>=1.7.2.release, <=1.7.3.release), org.springframework.cloud:spring-cloud-dataflow-docs (>=1.7.2.release, <=1.7.3.release) +24 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.1.2.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-classic-doc...