ROOT-APP-MAVEN-CVE-2024-38829 CVE-2024-38829 in org.springframework.ldap:spring-ldap-core - Patched by Root

Root has patched CVE-2024-38829 in the org.springframework.ldap:spring-ldap-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41720 CVE-2026-41720 in org.springframework.ldap:spring-ldap-core - Patched by Root

Root has patched CVE-2026-41720 in the org.springframework.ldap:spring-ldap-core package for Root:Maven. Multiple fixed versions available...

CLSA-2026-1789400252 TuxCare security update for org.springframework.ldap:spring-ldap-core (1 CVE)

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 1 CVE. Fixed in 2.3.3.RELEASE-tuxcare.1...

PT-2026-98181

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 1 CVE. Fixed in 2.3.3.RELEASE-tuxcare.1...

CLSA-2026-1789146534 TuxCare security update for org.springframework.ldap (1 CVE)

TuxCare rebuilt 8 org.springframework.ldap packages to address 1 CVE. Fixed in 2.4.1-tuxcare.2...

Incorrect Implementation of Authentication Algorithm

Overview org.springframework.ldap:spring-ldap-core is a maven plugin for LDAP for Sping. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm via LDAP authentication handling in DirContextAuthenticationStrategy implementations. An attacker can...

Sensitive Information Exposure

org.springframework.ldap:spring-ldap-core is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper handling of case conversions using String.toLowerCase and String.toUpperCase methods, which can have locale-dependent exceptions. This may lead to unintended columns bei...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.1.0), com.daioware.security:security (1.0.0.release) +160 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (1.3.2.release)

org.springframework.ldap:spring-ldap-core MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ldap:spring-ldap-core and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =1.5.2, =0.3.1, =0.2.0, =0.2.0,...

com.github.ptomli.bedrock:bedrock-core (1.0.0), com.isotrol.impe3.extensions:impe3-pms-ldap (>=3.0.0, <=3.1.1) +167 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (1.3.1.release)

org.springframework.ldap:spring-ldap-core MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ldap:spring-ldap-core and may be impacted: - com.github.ptomli.bedrock:bedrock-core 1.0.0 -...

com.almis.awe.clients:test-react (>=0.0.11, <=1.0.5), com.almis.awe:awe-annotation (>=4.7.1, <=4.10.10) +124 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=3.0.0, <=3.2.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.0.0, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.10.10 and more Source cves: CVE-2024-38829 Source advisory: GHSA-MQVR-2RP8-J7H4...

com.almis.awe.clients:test-react (>=0.0.11, <=1.0.5), com.almis.awe:awe-annotation (>=4.7.1, <=4.10.10) +124 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=3.0.0, <=3.2.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.0.0, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.10.10 and more Source cves: CVE-2024-38829 Source advisory: OSV:GHSA-MQVR-2RP8-J7H4...

cc.chensoul.nacos:core-test (2.5.2), cc.chensoul.nacos:default-auth-plugin (2.5.2) +642 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=2.0.0.release, <=2.4.2)

org.springframework.ldap:spring-ldap-core MAVEN version =2.0.0.release, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.585.9 and more Source cves: CVE-2024-38829 Source advisory: OSV:GHSA-MQVR-2RP8-J7H4...

com.almis.awe.clients:test-react (>=0.0.11, <=1.0.5), com.almis.awe:awe-annotation (>=4.7.1, <=4.10.10) +124 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=3.0.0, <=3.2.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.0.0, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.10.10 and more Source cves: CVE-2024-38829 Source advisory: MEND:CVE-2024-38829...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.1.0), cc.chensoul.nacos:core-test (2.5.2) +868 more potentially affected by CVE-2024-38829 via org.springframework.ldap:spring-ldap-core (>=1.3.0.release, <=2.4.2)

org.springframework.ldap:spring-ldap-core MAVEN version =1.3.0.release, =0.3.3, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.567.22 and more Source cves: CVE-2024-38829 Source advisory: MEND:CVE-2024-38829...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.1.0), com.ahome-it:ahome-tooling-server-core (>=1.0.83-rc1, <=1.1.36-release) +556 more potentially affected by CVE-2017-8028 via org.springframework.ldap:spring-ldap-core (>=1.3.0.release, <=2.3.1.release)

org.springframework.ldap:spring-ldap-core MAVEN version =1.3.0.release, =0.3.3, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.1.0-release, =1.0.83-rc1, =1.0.83-rc1, =3.1.0, =3.1.0, =3.1.3, =3.1.3, =3.1.8 - com.capitalone.dashboard:jira-feature-collector 3.1.3 -...