com.azure.spring:azure-spring-boot-starter-active-directory-b2c (3.6.0), com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget (>=0.1.0-beta.8, <=1.0.0) +18 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (5.5.0)

org.springframework.security:spring-security-oauth2-client MAVEN version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-client and may be impacted: -...

cn.itlym:shoulder-security (0.3), cn.itlym:shoulder-security-code (0.3) +233 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (>=5.3.1.release, <=5.3.9.release)

org.springframework.security:spring-security-oauth2-client MAVEN version =5.3.1.release, =3.0.0-beta.1, =2.2.0, =2.0, =1.0.0, =2.3.1, =6.20.1, =6.6.33, =3.0.0.release, =4.0.8.release and more Source cves: CVE-2021-22119 Source advisory: GHSA-W9JG-GVGR-354M...

com.azure.spring:azure-spring-boot-starter-active-directory-b2c (>=3.3.0, <=3.5.0), com.backbase.oss:scdf-maven-plugin (0.2.0) +114 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (>=5.4.0, <=5.4.6)

org.springframework.security:spring-security-oauth2-client MAVEN version =5.4.0, =3.3.0, =2.4.1, =1.12, =1.18.1, =1.12, =1.12, =1.12, =1.12.1, =0.1.0-beta.6, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5...

com.azure.spring:azure-spring-boot-starter-active-directory-b2c (3.6.0), com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget (>=0.1.0-beta.8, <=1.0.0) +18 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (5.5.0)

org.springframework.security:spring-security-oauth2-client MAVEN version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-client and may be impacted: -...

cloud.altemista.fwk.azure:cloud-altemistafwk-core-azure-active-directory (3.1.0.release), cloud.altemista.fwk.azure:cloud-altemistafwk-core-azure-active-directory-conf (3.1.0.release) +100 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (>=5.2.0.release, <=5.2.9.release)

org.springframework.security:spring-security-oauth2-client MAVEN version =5.2.0.release, =2.0.0, =1.0.0, =5.0.0, =0.0.3, =0.1.0, =0.1.0, =0.2, =0.2, =0.3 and more Source cves: CVE-2021-22119 Source advisory: GHSA-W9JG-GVGR-354M...

cloud.altemista.fwk.azure:cloud-altemistafwk-core-azure-active-directory (3.1.0.release), cloud.altemista.fwk.azure:cloud-altemistafwk-core-azure-active-directory-conf (3.1.0.release) +100 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (>=5.2.0.release, <=5.2.9.release)

org.springframework.security:spring-security-oauth2-client MAVEN version =5.2.0.release, =2.0.0, =1.0.0, =5.0.0, =0.0.3, =0.1.0, =0.1.0, =0.2, =0.2, =0.3 and more Source cves: CVE-2021-22119 Source advisory: OSV:GHSA-W9JG-GVGR-354M...

cn.itlym:shoulder-security (0.3), cn.itlym:shoulder-security-code (0.3) +233 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (>=5.3.1.release, <=5.3.9.release)

org.springframework.security:spring-security-oauth2-client MAVEN version =5.3.1.release, =3.0.0-beta.1, =2.2.0, =2.0, =1.0.0, =2.3.1, =6.20.1, =6.6.33, =3.0.0.release, =4.0.8.release and more Source cves: CVE-2021-22119 Source advisory: OSV:GHSA-W9JG-GVGR-354M...

com.azure.spring:azure-spring-boot-starter-active-directory-b2c (>=3.3.0, <=3.5.0), com.backbase.oss:scdf-maven-plugin (0.2.0) +114 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (>=5.4.0, <=5.4.6)

org.springframework.security:spring-security-oauth2-client MAVEN version =5.4.0, =3.3.0, =2.4.1, =1.12, =1.18.1, =1.12, =1.12, =1.12, =1.12.1, =0.1.0-beta.6, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5...

com.azure.spring:azure-spring-boot-starter-active-directory-b2c (3.6.0), com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget (>=0.1.0-beta.8, <=1.0.0) +18 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (5.5.0)

org.springframework.security:spring-security-oauth2-client MAVEN version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-client and may be impacted: -...

com.azure.spring:azure-spring-boot-starter-active-directory-b2c (>=3.3.0, <=3.5.0), com.backbase.oss:scdf-maven-plugin (0.2.0) +114 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-oauth2-client (>=5.4.0, <=5.4.6)

org.springframework.security:spring-security-oauth2-client MAVEN version =5.4.0, =3.3.0, =2.4.1, =1.12, =1.18.1, =1.12, =1.12, =1.12, =1.12.1, =0.1.0-beta.6, =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5...

com.malliina:mobile-push_2.12 (1.12.5), com.malliina:play-social_2.12 (>=4.12.3, <=4.13.0) +4 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (5.12)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.malliina:mobile-push2.12 1.12.5 - com.malliina:play-social2.12 =4.12.3, =4.12.3, =0.0.11, =0.0.12 -...

com.github.springbootplus:spring-boot-starter-allinone (2.0.1.release), com.malliina:mobile-push_2.12 (>=1.12.2, <=1.12.4) +7 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (5.9)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.springbootplus:spring-boot-starter-allinone 2.0.1.release - com.malliina:mobile-push2.12...

org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-security-oauth2-jose (5.0.6.release_1), org.springframework.security:spring-security-oauth2-jose (5.0.6.release) potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (5.11)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-security-oauth2-jose 5.0.6.release1 -...

Open Redirection

spring-security-oauth2 is vulnerable to open redirection. A remote attacker is able to modify the redirecturi parameter and redirect users to a malicious site to steal confidential information such as authorization code, username and password...

com.ohadr.oauth2:auth-common (>=1.1.3, <=1.6.0-release), de.juplo:facebook-utils (1.0) +8 more potentially affected by CVE-2019-3778 via org.springframework.security.oauth:spring-security-oauth2 (1.0.5.release)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version 1.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security.oauth:spring-security-oauth2 and may be impacted: - com.ohadr.oauth2:auth-common =1.1.3,...

org.cloudfoundry:cf-gradle-plugin (>=1.0.1, <=1.0.3), org.cloudfoundry:cf-maven-plugin (>=1.0.1, <=1.0.3) +1 more potentially affected by CVE-2019-3778 via org.springframework.security.oauth:spring-security-oauth2 (1.0.0.release)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security.oauth:spring-security-oauth2 and may be impacted: - org.cloudfoundry:cf-gradle-plugin...

org.mitre:openid-connect-client (>=0.9.0, <=1.0.22), org.mitre:openid-connect-common (>=0.9.0, <=1.0.22) +2 more potentially affected by CVE-2019-3778 via org.springframework.security.oauth:spring-security-oauth2 (1.0.2.release)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security.oauth:spring-security-oauth2 and may be impacted: - org.mitre:openid-connect-client =0.9....

br.com.anteros:anteros-keycloak (1.0.0), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +69 more potentially affected by CVE-2019-3778 via org.springframework.security.oauth:spring-security-oauth2 (>=2.2.0.release, <=2.2.3.release)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =2.2.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0.m2, =1.0.0.m2, =3.3.2, =4.0.1 - com.ge.research.semtk:springsecuritylibrary 2.2.2 -...

br.com.anteros:anteros-keycloak (1.0.0), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +69 more potentially affected by CVE-2019-3778 via org.springframework.security.oauth:spring-security-oauth2 (>=2.2.0.release, <=2.2.3.release)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =2.2.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =1.0.0.m2, =1.0.0.m2, =3.3.2, =4.0.1 - com.ge.research.semtk:springsecuritylibrary 2.2.2 -...

am.ik.home:uaa-client (>=1.0.0, <=1.9.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.9.0) +658 more potentially affected by CVE-2019-3778 via org.springframework.security.oauth:spring-security-oauth2 (>=2.0.0.release, <=2.0.16.release)

org.springframework.security.oauth:spring-security-oauth2 MAVEN version =2.0.0.release, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0-rc, =1.0.0, =1.0.0, =1.0.0, =3.0.0, =3.0.0.release, =3.0.1.11 and more Source cves: CVE-2019-3778 Source advisory: GHSA-77RV-6VFW-X4GC...