606 matches found
VMware Spring AI Security Vulnerabilities
VMware Spring AI is a development framework from VMware that integrates artificial intelligence and big language modeling capabilities in the Spring ecosystem. A security vulnerability exists in VMware Spring AI versions 1.0.0 through 1.0.7 prior and 1.1.0 through 1.1.6 prior, which stems from...
This Week in Spring - March 24th, 2026
Hi, Spring fans! Welcome to yet another rip-roarin' installment of This Week in Spring. As usual, we've got a ton to look into, so let's dive right in! Happy 22nd birthday to Spring Framework, released this day 22 years ago! and of course, next week, 1 April 2026, marks 12 years since Spring Boot...
A Bootiful Podcast: Glenn Renfro on Java and Spring community legend and my friend - on Devnexus and more
Hi, Spring fans! In this installment I talk to the amazing Glenn Renfro about Spring Batch, Spring Integration, Spring AI, and much more — plus why you should definitely register to attend the amazing Devnexus event in Atlanta, GA!...
This Week in Spring - January 26th, 2026
Hi, Spring fans! Welcome to another installment of This Week in Spring! As I write this, I cannot believe we're nearly at the end of the month! Time sure flies. Spring AI 2.0.0-M2 is available now Spring Modulith 2.1 M1, 2.0.2, and 1.4.7 released In last week's installment of A Bootiful Podcast ,...
New Home for Spring Integration AWS
The Spring Integration for AWS was always an independent Spring Integration extension project with its own plans and release cycles. The consumption of this single jar library has always added a complexity from the dependency management perspective. It depends not only on Spring Integration modul...
org.springframework.integration:spring-integration-websocket (4.3.22.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.26.release)
org.springframework:spring-websocket MAVEN version 4.3.26.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.integration:spring-integration-websocket 4.3.22.release...
net.apexes.wsonrpc:wsonrpc (0.5.0), org.springframework.integration:spring-integration-websocket (4.1.0.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.1.2.release)
org.springframework:spring-websocket MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - net.apexes.wsonrpc:wsonrpc 0.5.0 -...
org.springframework.boot:spring-boot-starter-websocket (1.5.17.release), org.springframework.integration:spring-integration-websocket (4.3.18.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.20.release)
org.springframework:spring-websocket MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.5.17.release -...
de.fhg.fokus.nubomedia:nubomedia-media-client (>=1.0, <=6.6.0), org.springframework.boot:spring-boot-starter-websocket (1.2.7.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.1.8.release)
org.springframework:spring-websocket MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - de.fhg.fokus.nubomedia:nubomedia-media-client =1.0, =4.1.7.release,...
org.springframework.integration:spring-integration-websocket (4.2.13.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.9.release)
org.springframework:spring-websocket MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.integration:spring-integration-websocket 4.2.13.release...
ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +6 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.0.release)
org.springframework:spring-websocket MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...
ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.9-release) +12 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.1.release)
org.springframework:spring-websocket MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =1.1.4-release, =1.1.4-release,...
org.ops4j.pax.web.samples:war-vaadin08-spring (>=9.0.11, <=10.1.1), org.springframework.integration:spring-integration-websocket (4.3.24.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.30.release)
org.springframework:spring-websocket MAVEN version 4.3.30.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.ops4j.pax.web.samples:war-vaadin08-spring =9.0.11, =1.2.7, =1.3.11 Source...
org.springframework.boot:spring-boot-starter-websocket (1.5.11.release), org.springframework.integration:spring-integration-websocket (4.3.15.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.15.release)
org.springframework:spring-websocket MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.5.11.release -...
io.antmedia.webrtc:streamapp (>=2.2.0, <=2.4.2.1), org.springframework.integration:spring-integration-websocket (4.3.23.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.28.release)
org.springframework:spring-websocket MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - io.antmedia.webrtc:streamapp =2.2.0, =2.4.2.1 -...
cn.ymotel:dactor (>=1.0.1, <=1.0.15), org.springframework.boot:spring-boot-starter-websocket (1.5.19.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.22.release)
org.springframework:spring-websocket MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - cn.ymotel:dactor =1.0.1, =1.0.15 -...
EUVD-2019-0197
Malware in sbrugna...
EUVD-2020-0604
Malware in sbrugna...