ai.minxiao:ds4s-cdl4j_2.11 (>=0.1.0, <=0.1.2), ba.jamax.util:jamax-rest (>=1.3.1-release, <=1.3.4-release) +1229 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.6.release)

org.springframework:spring-context MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ai.minxiao:ds4s-cdl4j2.11 =0.1.0, =1.3.1-release, =2.2.0, =2.4.0, =2.2.0, =2.4.0,...

ch.hsr.mas.oms-financialanalyzer:indicators (1.2.0), ch.hsr.mas.oms-financialanalyzer:oms-api (1.2.0) +464 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.1.1.release)

org.springframework:spring-context MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.hsr.mas.oms-financialanalyzer:indicators 1.2.0 -...

com.blogspot.ostas:jamaexamplewebapp (>=1.0.1, <=1.0.2), com.github.bluejoe2008:elfinder-servlet-2 (>=1.0, <=1.2) +442 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.3.release)

org.springframework:spring-context MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.blogspot.ostas:jamaexamplewebapp =1.0.1, =1.0, =1.0.0, =1.0.1, =1.2.1 and more...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +143 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.5.1)

org.springframework:spring-context MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.2.1, =0.7, =1.3, =2.0, =2.0,...

ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1), ch.epfl.bbp.nlp:bluima_corpora (>=1.0.0, <=1.0.1) +734 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.1.2.release)

org.springframework:spring-context MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.epfl.bbp.nlp:bluimaabbreviations =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

at.molindo:molindo-notify (2.1.0), ch.powerunit.extensions:powerunit-extensions-spring (0.0.1) +628 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.7.release)

org.springframework:spring-context MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:molindo-notify 2.1.0 - ch.powerunit.extensions:powerunit-extensions-spri...

at.rocklogic.kafka:object-support (>=0.2, <=1.1), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.0) +586 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.5.release)

org.springframework:spring-context MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.rocklogic.kafka:object-support =0.2, =0.1.0, =1.3.5 -...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +28 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (1.2.8)

org.springframework:spring-context MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =1.0.2, =1.0.2, =1.0.0, =1.0.2 -...

am.ik.springmvc:new-controller (>=0.1.0, <=0.2.0), br.ufc.quixada.npi:npi-core-api (0.1.0) +549 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.4.release)

org.springframework:spring-context MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - am.ik.springmvc:new-controller =0.1.0, =1.0.1, =0.5.0-rc2, =0.6.0-rc1, =0.6.0-rc1,...

org.springframework:spring-dao (1.2.4), org.springframework:spring-hibernate (1.2.4) +7 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (1.2.4)

org.springframework:spring-context MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.springframework:spring-dao 1.2.4 - org.springframework:spring-hibernate 1.2.4 -...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-core (1.1.4.release) +434 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.8.release)

org.springframework:spring-context MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

am.ik.blog:blog-domain (>=4.0.2, <=4.2.0), am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0) +1739 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.7.release)

org.springframework:spring-context MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - am.ik.blog:blog-domain =4.0.2, =4.0.0, =2.0.0, =1.0.3, =1.0.0, =2.4, =2.4, =2.4,...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release), com.alibaba.csb.sdk:java (1.1.5.11) +142 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.18.release)

org.springframework:spring-context MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release - com.alibaba.csb.sdk:java...

org.acegisecurity:acegi-security (1.0.4), org.acegisecurity:acegi-security-adapters (1.0.4) +29 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.0.4)

org.springframework:spring-context MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.acegisecurity:acegi-security 1.0.4 - org.acegisecurity:acegi-security-adapters 1.0.4 -...

com.github.dalet-oss:mongobee (>=1.0.1, <=1.0.4), com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0) +147 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.27.release)

org.springframework:spring-context MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.github.dalet-oss:mongobee =1.0.1, =0.6.0, =0.10.0, =0.10.0, =0.10.0, =1.0.0 -...

org.jasig.service:person-directory (1.0.1), org.jasig:person-directory (1.0.0) +22 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.0.3)

org.springframework:spring-context MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.jasig.service:person-directory 1.0.1 - org.jasig:person-directory 1.0.0 -...

at.molindo:spring-data-custom (1.0.0), at.researchstudio.sat:won-core (>=0.2, <=0.3) +1477 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.8.release)

org.springframework:spring-context MAVEN version 4.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:spring-data-custom 1.0.0 - at.researchstudio.sat:won-core =0.2, =0.2,...

at.porscheinformatik.zanata:zanata-spring (>=1.0.0.release, <=1.1.0.release), ca.appsimulations:jlqninterface (>=1.0.0, <=1.1.0) +1572 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.13.release)

org.springframework:spring-context MAVEN version 4.3.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.porscheinformatik.zanata:zanata-spring =1.0.0.release, =1.0.0, =1.0.2, =1.1.4,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-spring-boot-starter (0.2.0) +10639 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.2.0, <=6.2.6)

org.springframework:spring-context MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2024-38820, CVE-2025-22233 Source advisory: MEND:CVE-2025-22233...

Improper Handling of Case Sensitivity

Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to an incomplete fix for CVE-2024-38820, where it is still possible to bypass the disallowedFields checks. Note: This vulnerability was also fixed in commercial versions 6.0.28 and 5.3.43...