com.ge.predix:uaa-token-lib (>=3.3.2, <=4.0.1), com.github.lizixiang:triph-common (0.0.1-release) +96 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.10.release)

org.springframework.security:spring-security-web MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ge.predix:uaa-token-lib =3.3.2, =1.0.6, =1.0.1,...

cc.kebei:onion-expands-office (>=3.0.3, <=3.0.6), cc.kebei:onion-expands-script (>=3.0.3, <=3.0.6) +121 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.12.release)

org.springframework.security:spring-security-core MAVEN version 4.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cc.kebei:onion-expands-office =3.0.3, =3.0.3, =3.0.3...

com.aerse:gcless (11.2), com.aerse:spring-security-taglib (1.1) +107 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.2.1.release)

org.springframework.security:spring-security-core MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.aerse:gcless 11.2 -...

com.ahome-it:ahome-tooling-server-core (>=1.1.19-release, <=1.1.27-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.23-release, <=1.1.27-release) +57 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.0.release)

org.springframework.security:spring-security-web MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.19-release,...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +10 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.2.release)

org.springframework.security:spring-security-web MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

com.auth0:auth0-spring-security-api (>=1.3.1, <=1.4.0), com.capitalone.dashboard:hygieia-common (>=4.0.5, <=4.1.0) +29 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.15.release)

org.springframework.security:spring-security-web MAVEN version 4.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.auth0:auth0-spring-security-api =1.3.1, =4.0.5,...

org.ff4j:ff4j-security-spring (>=1.0.0, <=1.1.0), org.springframework.security:spring-security-acl (3.0.8.release) +7 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.0.8.release)

org.springframework.security:spring-security-core MAVEN version 3.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.ff4j:ff4j-security-spring =1.0.0, =1.1.0 -...

com.capitalone.dashboard:core (>=3.7.8, <=3.9.9), com.github.waffle.demo:waffle-spring-filter (2.3.0) +56 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.17.release)

org.springframework.security:spring-security-core MAVEN version 4.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.capitalone.dashboard:core =3.7.8, =1.7-15, =1.7-...

com.portlandwebworks:pww-commons (>=1.0, <=1.0.2), de.itsvs:cwtrpc-security (0.9.0) +12 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.6.release)

org.springframework.security:spring-security-web MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.portlandwebworks:pww-commons =1.0, =1.0.2 -...

com.github.dblock.waffle:waffle-spring-security3 (>=1.5, <=1.6), com.paddypowerbetfair.springframework:spring-security-saml-keys-rollover (1.0.2) +23 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.1.2.release)

org.springframework.security:spring-security-web MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.dblock.waffle:waffle-spring-security3 =1.5,...

au.org.consumerdatastandards:client-cli (>=1.1.1, <=1.12.0), com.atlassian.asap:asap-server-spring-security (>=2.21.8, <=2.21.9) +107 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.11.release)

org.springframework.security:spring-security-web MAVEN version 4.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - au.org.consumerdatastandards:client-cli =1.1.1, =2.21....

cc.ereach:ereach-boot-starter-security (1.0.1), com.ge.predix:uaa-token-lib (>=3.3.2, <=4.0.1) +114 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.2.10.release)

org.springframework.security:spring-security-core MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cc.ereach:ereach-boot-starter-security 1.0.1 -...

org.codehaus.enunciate:enunciate-spring-security-rt (>=1.20, <=1.22), org.codehaus.spring-security-oauth:spring-security-oauth (>=2.4, <=3.19) +20 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (2.0.3)

org.springframework.security:spring-security-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.codehaus.enunciate:enunciate-spring-security-rt =1.20,...

org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), com.github.yongjacky:jee.borneo.miri (1.1.6) +111 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.1.4.release)

org.springframework.security:spring-security-core MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =1.6-2, =1.6.0,...

am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +71 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.1.4.release)

org.springframework.security:spring-security-web MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =3.0.1.3,...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (j11.2.6.0) +1524 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (>=5.6.0, <=5.6.3)

org.springframework.security:spring-security-core MAVEN version =5.6.0, =4.4.0.2, =1.3.1.release, =0.2.0, =0.8.3, =2.1.0.m8, =1.0.0, =2.7.0.beta3, =2.7.0.beta4, =2.7.0.beta3, =2.7.0.beta3, =2.7.0.beta3, =2.7.0.rc1 and more Source cves: CVE-2022-22978 Source advisory: OSV:GHSA-HH32-7344-CG2F...

com.arsframework:ars-module-cms (>=1.0.0, <=1.1.4), com.arsframework:ars-module-educate (>=1.0.0, <=1.1.0) +186 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.1.3.release)

org.springframework.security:spring-security-core MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.arsframework:ars-module-cms =1.0.0, =1.0.0, =1.0....

at.researchstudio.sat:won-cryptography (0.3), at.researchstudio.sat:won-matcher (0.3) +1122 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.3.release)

org.springframework.security:spring-security-core MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.researchstudio.sat:won-cryptography 0.3 -...

com.github.lrkwz:urlmanaged-locale (0.0.1), com.revolsys.open:com.revolsys.open.orm (>=2012.07.30.release, <=2012.11.01.release) +30 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.7.release)

org.springframework.security:spring-security-web MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.lrkwz:urlmanaged-locale 0.0.1 -...