com.github.jknack:mwa-mongo (>=0.4.1, <=0.4.2), com.github.jknack:mwa-morphia (>=0.4.1, <=0.4.2) +7 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.3.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo =0.4.1, =0.4.1, =4.1.0, =3.0.6,...

org.springframework.data:spring-data-mongodb-cross-store (1.7.0.release) potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.7.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

ch.sahits.game:openpatriciantest (>=1.0.0, <=1.0.1), com.alipay.sofa:sofa-tracer-mongodb-plugin (>=3.1.0, <=3.1.2) +22 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.1.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =1.0.0, =3.1.0, =2.1.0.release...

com.capitalone.dashboard:api (>=3.3.0, <=3.4.52), com.capitalone.dashboard:api-audit (>=3.5.1, <=3.7.33) +15 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.23.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.capitalone.dashboard:api =3.3.0, =3.5.1, =3.2.0, =3.10.0,...

com.ibm.cloud:amqp-mongo-example (0.0.4), com.ibm.cloud:amqp-mongo-kafka (>=0.0.5, <=1.0) +28 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.2.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.ibm.cloud:amqp-mongo-example 0.0.4 -...

SpEL Injection in Spring Data MongoDB

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

in.clouthink.daas:daas-token (>=1.0.0, <=1.8.1), io.github.jhipster.loaded:agent (>=0.5, <=0.12) +7 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.4.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - in.clouthink.daas:daas-token =1.0.0, =0.5, =0.5, =0.5, =0.5,...

org.sentilo.agent:sentilo-agent-activity-monitor (1.7.0), org.sentilo.agent:sentilo-agent-alert (1.7.0) +4 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.3.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.sentilo.agent:sentilo-agent-activity-monitor 1.7.0 -...

org.springframework.data:spring-data-mongodb-cross-store (1.3.4.release) potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.3.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.activiti.cloud.messages:activiti-cloud-starter-messages-mongodb (7.1.0.m6), org.springframework.boot:spring-boot-starter-data-mongodb (2.1.12.release) +3 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.1.15.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.11.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.11.release) +3 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.1.14.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

io.eventuate.tram.view.support:eventuate-tram-view-support-e2e-tests (>=0.3.0.release, <=0.5.0.release), io.github.daggerok:distributed-lock-mongodb (2.1.1) +30 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.1.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

org.springframework.data:spring-data-mongodb-cross-store (1.10.2.release) potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.shibgeek.cip.source-generator:com.shibgeek.cip.source-generator.gradle.plugin (>=0.1.2, <=0.1.4), de.adorsys.aspsp:aspsp-mock-server (>=1.7, <=1.10-rc1) +37 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.15.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

com.github.eagle6688:devutility.external (>=1.0, <=1.0.4), org.springframework.data:spring-data-mongodb-cross-store (2.0.4.release) +2 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.0.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.eagle6688:devutility.external =1.0, =2.0.1.release,...

com.breuninger.boot:example-app (>=3.1.1.release, <=3.2.1.release), com.codingapi:codingapi-test (0.0.2) +34 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.1.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.breuninger.boot:example-app =3.1.1.release, =1.0.3, =1.0.20...

cn.airfei.air-core:core (3.0.0), com.alpactech:mt-mongo (1.0.0) +40 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (3.4.0)

org.springframework.data:spring-data-mongodb MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.airfei.air-core:core 3.0.0 - com.alpactech:mt-mongo 1.0.0 -...

ch.sahits.game:openpatriciantest (>=0.9.1-rc1, <=0.9.1), cn.minsin:mutils-data-mongodb (>=0.0.2.release, <=0.4.0.release) +14 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.0.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =0.9.1-rc1, =0.0.2.release,...

org.springframework.data:spring-data-mongodb-cross-store (1.9.9.release) potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.9.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.efindi:smo-filter (0.0.1-release), org.springframework.data:spring-data-mongodb-cross-store (2.0.2.release) +3 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.0.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.efindi:smo-filter 0.0.1-release -...