com.ahome-it:ahome-tooling-server-core (>=1.1.10-release, <=1.1.12-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.10-release, <=1.1.12-release) +110 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.2.release)

org.springframework:spring-websocket MAVEN version 4.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.10-release, =1.1.10-release,...

org.springframework.boot:spring-boot-starter-websocket (1.5.11.release), org.springframework.integration:spring-integration-websocket (4.3.15.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.15.release)

org.springframework:spring-websocket MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.5.11.release -...

org.chtijbug.drools:drools-platform-runtime-servlet (0.5.0), org.chtijbug.drools:loyalty-soap-server (0.5.0) +2 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.0.5.release)

org.springframework:spring-websocket MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.chtijbug.drools:drools-platform-runtime-servlet 0.5.0 -...

net.solarnetwork.common:net.solarnetwork.common.web (>=2.2.0, <=2.4.0), org.springframework.boot:spring-boot-starter-websocket (1.5.20.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.23.release)

org.springframework:spring-websocket MAVEN version 4.3.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - net.solarnetwork.common:net.solarnetwork.common.web =2.2.0, =2.4.0 -...

at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21) +927 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=6.2.0, <=6.2.11)

org.springframework:spring-websocket MAVEN version =6.2.0, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2025-41254 Source advisory: MEND:CVE-2025-41254...

Cross-site Request Forgery (CSRF)

Overview org.springframework:spring-websocket is a framework that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF vi...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), br.com.m4rc310:br-com-m4rc310-graphql (1.0.1) +1237 more potentially affected by CVE-2024-38820 via org.springframework:spring-websocket (>=5.3.0, <=5.3.39)

org.springframework:spring-websocket MAVEN version =5.3.0, =4.4.0.2, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.2.0, =6.8.0, =6.4.0, =5.3.0, =6.10.5 and more Source cves: CVE-2024-38820 Source advisory: MEND:CVE-2024-38820...

org.springframework.security:spring-security-cas (5.0.18.release), org.springframework.security:spring-security-oauth2-client (5.0.18.release) +8 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.18.release)

org.springframework:spring-web MAVEN version 5.0.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework.security:spring-security-cas 5.0.18.release -...

io.github.opensabre:common-web (>=0.0.1, <=0.0.2), org.springframework.security:spring-security-cas (>=5.0.16.release, <=5.0.17.release) +9 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.17.release)

org.springframework:spring-web MAVEN version 5.0.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - io.github.opensabre:common-web =0.0.1, =5.0.16.release, =5.0.16.release, =5.0.16.release,...

com.languageweaver.sdk:auth (>=1.5, <=2.2), com.mercateo.rest:rest-schemagen-spring (0.3.0) +5 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.20.release)

org.springframework:spring-web MAVEN version 5.0.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.languageweaver.sdk:auth =1.5, =1.0.6, =1.0.7 - org.springframework:spring-webflux...

org.springframework:spring-webflux (5.3.38), org.springframework:spring-webmvc (5.3.38) +1 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.38)

org.springframework:spring-web MAVEN version 5.3.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-webflux 5.3.38 - org.springframework:spring-webmvc 5.3.38 -...