com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.9), edu.usc.ir:lucene-geo-gazetteer (0.2) +117 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.5.5)

org.springframework:spring-web MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.custardsource.parfait:parfait-cxf =0.2.0, =1.0.15, =1.0.15, =1.0.15, =0.4.0, =1.4.0, =1.4.0,...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-captcha (>=1.5.13, <=1.5.13.2) +538 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.17.release)

org.springframework:spring-web MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-captcha =1.5.13, =1.5.13, =1.5.13,...

com.github.miemiedev:mybatis-paginator (>=1.2.10, <=1.2.17), com.hastybox:lesscss-compile-service (>=0.2.0, <=0.2.1) +43 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.0.0.release)

org.springframework:spring-web MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.miemiedev:mybatis-paginator =1.2.10, =0.2.0, =1.2.0, =1.0rc2, =5.2.0, =5.3.1 and...

at.porscheinformatik.zanata:zanata-spring (>=1.0.0.release, <=1.1.0.release), ch.ralscha:extdirectspring (1.7.4) +1098 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.13.release)

org.springframework:spring-web MAVEN version 4.3.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - at.porscheinformatik.zanata:zanata-spring =1.0.0.release, =1.1.4, =1.0.5, =1.0-release,...

ch.sbb.releasetrain:jsfbootadapter (0.0.25), ch.sbb.releasetrain:webui (0.0.25) +380 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.2.7.release)

org.springframework:spring-web MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ch.sbb.releasetrain:jsfbootadapter 0.0.25 - ch.sbb.releasetrain:webui 0.0.25 -...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +544 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.2.5.release)

org.springframework:spring-web MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base...

org.acegisecurity:acegi-security (1.0.4), org.acegisecurity:acegi-security-adapters (1.0.4) +14 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0.4)

org.springframework:spring-web MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security 1.0.4 - org.acegisecurity:acegi-security-adapters 1.0.4 -...

net.sourceforge.openutils:openutils-spring (0.2) potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0-m5)

org.springframework:spring-web MAVEN version 2.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.openutils:openutils-spring 0.2 Source cves: CVE-2024-38809 Source advisory:...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +18 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (1.2.8)

org.springframework:spring-web MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =1.0.3, =2.0.11, =5.0.3, =5.0.5 and more Source cves:...

au.com.mountain-pass:hyperstate (>=1, <=3), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4) +442 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.2.4.release)

org.springframework:spring-web MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =0.0.10, =0.0.10, =0.80, =0.80, =0.80, =0.80,...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +932 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.9.release)

org.springframework:spring-web MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.1, =1.7, =1.1.1, =1.0, =1.0.1, =1.1.12, =1.1.12,...

at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-core (1.1.0.release) +171 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.0.3.release)

org.springframework:spring-web MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release - at.molindo.social:spring-social-core...

com.54chen:paoding-rose (1.0), com.54chen:paoding-rose-portal (1.0) +24 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.5.6.sec02)

org.springframework:spring-web MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.54chen:paoding-rose 1.0 - com.54chen:paoding-rose-portal 1.0 -...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=4.0.0), cn.afterturn:easypoi-web (>=3.0.1, <=4.0.0) +234 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.1.1.release)

org.springframework:spring-web MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =3.0.1, =3.1.0, =3.1.0, =1.0.4, =1.0.6,...

org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +7 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (1.2.5)

org.springframework:spring-web MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...

com.github.inspektr:inspektr-support-spring (1.0.0.ga), fr.figarocms:web-debug-tag (>=0.0.1, <=1.0) +39 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.0.1.release)

org.springframework:spring-web MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.inspektr:inspektr-support-spring 1.0.0.ga - fr.figarocms:web-debug-tag =0.0.1,...

com.apigee.smartdocs.config:apigee-smartdocs-maven-plugin (>=2.2.0, <=2.2.2), com.foreach.across:across-web (3.1.2.release) +209 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.21.release)

org.springframework:spring-web MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.apigee.smartdocs.config:apigee-smartdocs-maven-plugin =2.2.0, =1.0.0, =0.0.1,...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-application (>=1.0.0, <=1.2.0) +27417 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (>=5.0.0.release, <=5.3.37)

org.springframework:spring-web MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =4.6.0.0 - ai.apiverse:apipulse 1.0.1 and more Source cves: CVE-2024-38809 Source advisory: OSV:GHSA-2RMJ-MQ67-H97G...

com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0), com.github.mjeanroy:springmvc-mustache-handlebars (>=0.10.0, <=1.0.0) +93 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.27.release)

org.springframework:spring-web MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.mjeanroy:springmvc-mustache =0.6.0, =0.10.0, =0.10.0, =0.10.0, =1.0.0 -...

am.ik.woothee:woothee-spring (1.0.0), be.rufer.swisscom.sms:api-client (1.0) +122 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.1.3.release)

org.springframework:spring-web MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - am.ik.woothee:woothee-spring 1.0.0 - be.rufer.swisscom.sms:api-client 1.0 -...