be.looorent:spring-security-jwt (>=0.1, <=0.8), br.jus.stf.digital:core (0.1.0) +193 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.1.1.release)

org.springframework.security:spring-security-core MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - be.looorent:spring-security-jwt =0.1, =1.0.0-rc,...

fr.xebia.springframework:xebia-spring-security-extras (>=1.1.4, <=1.1.6), org.appfuse:appfuse-jsf (2.1.0-m2) +27 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.4.release)

org.springframework.security:spring-security-web MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - fr.xebia.springframework:xebia-spring-security-extras...

Authorization bypass in Spring Security

In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an authorization bypass...

am.ik.home:uaa-client (1.9.0), am.ik.home:uaa-integration-test (1.9.0) +609 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.2.release)

org.springframework.security:spring-security-core MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - am.ik.home:uaa-client 1.9.0 -...

at.researchstudio.sat:won-cryptography (0.3), at.researchstudio.sat:won-matcher (0.3) +728 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.3.release)

org.springframework.security:spring-security-web MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - at.researchstudio.sat:won-cryptography 0.3 -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +125 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.9.release)

org.springframework.security:spring-security-core MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

am.ik.home:uaa-client (>=1.3.0, <=1.8.1), am.ik.home:uaa-integration-test (>=1.3.0, <=1.8.1) +86 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.1.release)

org.springframework.security:spring-security-web MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =0.2.0,...

org.springframework.security:spring-security-cas (4.2.14.release), org.springframework.security:spring-security-openid (4.2.14.release) +2 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.14.release)

org.springframework.security:spring-security-web MAVEN version 4.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.springframework.security:spring-security-cas...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.2, <=0.1.6) +5221 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (>=5.0.0.release, <=5.4.10)

org.springframework.security:spring-security-core MAVEN version =5.0.0.release, =4.4.0.0, =0.1.2, =0.5.0, =j8.2.4.0, =j8.2.4.0, =0.0.2, =0.0.3, =0.0.5 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 - au.net.causal.shoelaces:shoelaces-assorted-integration-tests-common 2.0...

com.auth0:auth0-spring-security-api (>=1.3.1, <=1.4.0), com.capitalone.dashboard:hygieia-common (>=4.0.5, <=4.1.0) +43 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.15.release)

org.springframework.security:spring-security-core MAVEN version 4.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.auth0:auth0-spring-security-api =1.3.1, =4.0.5,...

am.ik.home:uaa-client (>=1.3.0, <=1.8.1), am.ik.home:uaa-integration-test (>=1.3.0, <=1.8.1) +122 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.1.release)

org.springframework.security:spring-security-core MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =0.2.0,...

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-acl (3.0.1.release) +13 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.0.1.release)

org.springframework.security:spring-security-core MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +1535 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (>=5.5.0, <=5.5.6)

org.springframework.security:spring-security-core MAVEN version =5.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.13.0, =1.13.0, =2.2.0 - be.jidoka:jdk-keycloak-admin 1.2.0 and more Source cves: CVE-2022-22978 Source advisory:...

at.molindo.social:spring-social-security (1.1.4.release), com.foreach.across.modules:admin-web-module (1.1.1.release) +90 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.2.9.release)

org.springframework.security:spring-security-core MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.4.releas...

com.github.cwilper.fcrepo-cloudsync:fcrepo-cloudsync-service (>=1.0.0-beta-1, <=1.0.0), com.github.lltyk:tapestry-spring-security (>=3.0.2, <=3.0.3) +128 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.5.release)

org.springframework.security:spring-security-web MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

com.evasion:api (>=1.0.0.1, <=1.0.0.3), com.evasion:application-ear (>=1.0.0.1, <=1.0.0.3) +43 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (2.0.5.release)

org.springframework.security:spring-security-core MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.evasion:api =1.0.0.1, =1.0.0.1, =1.0.0.1, =1.0.0....

com.addc:addc-web-mvc (2.5), com.addc:addc-web-struts12 (2.5) +168 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.4.release)

org.springframework.security:spring-security-web MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.addc:addc-web-mvc 2.5 - com.addc:addc-web-struts12...

com.github.fosin:cdp-oauth2 (1.0.0.release), com.sap.cloud.lm.sl.cf:com.sap.cloud.lm.sl.cf.client (>=1.65.4, <=1.67.1) +101 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.8.release)

org.springframework.security:spring-security-web MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.fosin:cdp-oauth2 1.0.0.release -...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), com.github.yongjacky:jee.borneo.miri (1.1.6) +82 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.1.4.release)

org.springframework.security:spring-security-web MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =1.6-2, =1.6.0, =1.6....

com.github.jackpanz:maccloud-core (>=2.4.7, <=2.4.8), com.gwtincubator:gwt-incubator-security (1.0.1) +74 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (2.0.4)

org.springframework.security:spring-security-core MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.jackpanz:maccloud-core =2.4.7, =1.1-1, =1.1-2 -...