com.languageweaver.sdk:auth (>=1.5, <=2.2), com.mercateo.rest:rest-schemagen-spring (0.3.0) +5 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.20.release)

org.springframework:spring-web MAVEN version 5.0.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.languageweaver.sdk:auth =1.5, =1.0.6, =1.0.7 - org.springframework:spring-webflux...

com.github.skeychen:dswork-config (>=9.0.1, <=9.1.1), com.github.skeychen:dswork-javaweb (>=9.0.1, <=9.1.1) +73 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (4.3.28.release)

org.springframework:spring-web MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.skeychen:dswork-config =9.0.1, =9.0.1, =9.0.1, =9.0.1, =2.2.0, =2.2.0, =2.2.0,...

org.springframework:spring-webflux (5.3.38), org.springframework:spring-webmvc (5.3.38) +1 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.38)

org.springframework:spring-web MAVEN version 5.3.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-webflux 5.3.38 - org.springframework:spring-webmvc 5.3.38 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.3.0, <=3.4.0) +131 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.3.release)

org.springframework:spring-web MAVEN version 5.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =3.3.0...

cn.fastoo:fastoo-java-api (20171130), com.github.lynzabo.codegen:codegen-test (1.0-release) +47 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (2.5.4)

org.springframework:spring-web MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.fastoo:fastoo-java-api 20171130 - com.github.lynzabo.codegen:codegen-test 1.0-release -...

club.easy-utils:easy-wepay (>=0.0.1-snaoshot, <=0.0.2-snaoshot), club.easy-utils:easy-weprogram (>=0.0.1-snaoshot, <=1.0.2.1) +44 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (3.2.17.release)

org.springframework:spring-web MAVEN version 3.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - club.easy-utils:easy-wepay =0.0.1-snaoshot, =0.0.1-snaoshot, =1.2, =1.0.0, =1.0.0, =1.0.0,...

com.gitee.melin.bee:bee (1.8.1), com.sdl:odata_assembly (>=2.11.5, <=2.12.2) +85 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.35)

org.springframework:spring-web MAVEN version 5.3.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.gitee.melin.bee:bee 1.8.1 - com.sdl:odataassembly =2.11.5, =11.7.1, =11.7.1, =11.7.1, =11.7.1,...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +420 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (4.2.3.release)

org.springframework:spring-web MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter =0.1.6, =0.1.4-sb1x,...

com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0), com.github.mjeanroy:springmvc-mustache-handlebars (>=0.10.0, <=1.0.0) +93 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (4.3.27.release)

org.springframework:spring-web MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.mjeanroy:springmvc-mustache =0.6.0, =0.10.0, =0.10.0, =0.10.0, =1.0.0 -...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +78 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (4.0.8.release)

org.springframework:spring-web MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 - co.paralleluniverse:comsat-spring-webmvc 0.3...

com.github.qiujiayu:autoload-cache (>=1.3, <=2.8), com.sitewhere:sitewhere-activemq (>=1.0.2, <=1.4.0) +44 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (3.2.10.release)

org.springframework:spring-web MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.qiujiayu:autoload-cache =1.3, =1.0.2, =1.0.2, =1.0.2, =1.2.0, =1.0.2, =1.2.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.2.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.2.0, <=5.2.1) +2368 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.2.9.release)

org.springframework:spring-web MAVEN version 5.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0,...

com.webtide.hightide:hightide-resources (6.1h.8), net.sourceforge.openutils:openutils-spring (1.0.4) +63 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (2.0.6)

org.springframework:spring-web MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.webtide.hightide:hightide-resources 6.1h.8 - net.sourceforge.openutils:openutils-spring 1.0.4 -...

com.foreach.across.modules:across-hibernate-module (4.0.0.release), com.foreach.across.modules:admin-web-module (4.0.0.release) +172 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.1.13.release)

org.springframework:spring-web MAVEN version 5.1.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.foreach.across.modules:across-hibernate-module 4.0.0.release -...

Insecure Default Initialization of Resource in Pivotal Spring Web Flow

An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default i.e., set to 'false' can be vulnerable to malicious EL expressions in view states that process form...

GHSA-Q4V9-QJMW-J7VF Insecure Default Initialization of Resource in Pivotal Spring Web Flow

An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default i.e., set to 'false' can be vulnerable to malicious EL expressions in view states that process form...

GHSA-FG9W-CFFM-PMH2 Insecure Default Initialization of Resource in Pivotal Spring Web Flow

An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default i.e., set to 'false' can be vulnerable to malicious EL expressions in view states that process form...

org.acegisecurity:acegi-security (1.0.4), org.acegisecurity:acegi-security-adapters (1.0.4) +14 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0.4)

org.springframework:spring-web MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security 1.0.4 - org.acegisecurity:acegi-security-adapters 1.0.4 -...

org.apache.struts:struts2-portlet (>=2.1.2, <=2.1.6), org.apache.struts:struts2-showcase (>=2.1.2, <=2.1.6) +18 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.5.3)

org.springframework:spring-web MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.apache.struts:struts2-portlet =2.1.2, =2.1.2, =2.1.2, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1,...

org.springframework:spring-portlet (2.0-m1), org.springframework:spring-remoting (2.0-m1) +1 more potentially affected by CVE-2013-6429 via org.springframework:spring-web (2.0-m1)

org.springframework:spring-web MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0-m1 - org.springframework:spring-remoting 2.0-m1 -...