61 matches found
org.jsondoc:jsondoc-springmvc (>=1.2.14, <=1.2.23), org.springframework.data:spring-data-rest-hal-browser (2.5.1.release) +1 more potentially affected by CVE-2026-41728 via org.springframework.data:spring-data-rest-core (2.5.1.release)
org.springframework.data:spring-data-rest-core MAVEN version 2.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.jsondoc:jsondoc-springmvc =1.2.14, =1.2.23 -...
org.jsondoc:jsondoc-springmvc (>=1.2.14, <=1.2.23), org.springframework.data:spring-data-rest-hal-browser (2.5.1.release) +1 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.5.1.release)
org.springframework.data:spring-data-rest-core MAVEN version 2.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.jsondoc:jsondoc-springmvc =1.2.14, =1.2.23 -...
com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0), com.github.mjeanroy:springmvc-mustache-handlebars (>=0.10.0, <=1.0.0) +28 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.3.27.release)
org.springframework:spring-webmvc MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.mjeanroy:springmvc-mustache =0.6.0, =0.10.0, =0.10.0, =0.10.0, =3.1.6,...
com.jdroidframework:jdroid-java-webapp-core (0.10.0), com.jdroidtools:jdroid-java-webapp-core (1.0.0) +18 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (3.2.18.release)
org.springframework:spring-webmvc MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.jdroidframework:jdroid-java-webapp-core 0.10.0 -...
com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0), com.github.mjeanroy:springmvc-mustache-handlebars (>=0.10.0, <=1.0.0) +28 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.27.release)
org.springframework:spring-webmvc MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.mjeanroy:springmvc-mustache =0.6.0, =0.10.0, =0.10.0, =0.10.0, =3.1.6,...
com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-webx-all (>=3.1.6, <=3.2.4) +34 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (3.2.7.release)
org.springframework:spring-webmvc MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.alibaba.citrus:citrus-test-all =3.1.6, =3.1.6, =0.10.0, =1.0.1, =0.8.3, =1.0,...
org.apache.portals.bridges:springmvc (1.0.4), org.apache.portals.jetspeed-2:j2-admin (>=2.1.3, <=2.1.4) +13 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.0.5)
org.springframework:spring-webmvc MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.portals.bridges:springmvc 1.0.4 - org.apache.portals.jetspeed-2:j2-admin =2.1.3,...
com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0), com.github.mjeanroy:springmvc-mustache-handlebars (>=0.10.0, <=1.0.0) +28 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (4.3.27.release)
org.springframework:spring-webmvc MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.mjeanroy:springmvc-mustache =0.6.0, =0.10.0, =0.10.0, =0.10.0, =3.1.6,...
com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-webx-all (>=3.1.6, <=3.2.4) +34 more potentially affected by CVE-2026-22745 via org.springframework:spring-webmvc (3.2.7.release)
org.springframework:spring-webmvc MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.alibaba.citrus:citrus-test-all =3.1.6, =3.1.6, =0.10.0, =1.0.1, =0.8.3, =1.0,...
org.apache.portals.bridges:springmvc (1.0.4), org.apache.portals.jetspeed-2:j2-admin (>=2.1.3, <=2.1.4) +13 more potentially affected by CVE-2026-22745 via org.springframework:spring-webmvc (2.0.5)
org.springframework:spring-webmvc MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.portals.bridges:springmvc 1.0.4 - org.apache.portals.jetspeed-2:j2-admin =2.1.3,...
java_server security vulnerability
javaserver is a campus e-commerce project management platform based on SpringMVC+spring+Mybatis by xiaowei1118 individual developer. A security vulnerability exists in javaserver, which stems from a path traversal in the file upload function...
com.phoenixnap.oss:springmvc-raml-parser (0.9.1), com.phoenixnap.oss:springmvc-raml-plugin (0.9.1) +4 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.29)
org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - com.phoenixnap.oss:springmvc-raml-parser 0.9.1 -...
com.github.raml2spring:raml2spring-maven-plugin (0.1.0), com.phoenixnap.oss:springmvc-raml-plugin (>=2.0.0, <=2.0.5) +49 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.5.1)
org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - com.github.raml2spring:raml2spring-maven-plugin 0.1.0 -...
com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0), com.github.mjeanroy:springmvc-mustache-handlebars (>=0.10.0, <=1.0.0) +93 more potentially affected by CVE-2024-38820 via org.springframework:spring-web (4.3.27.release)
org.springframework:spring-web MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.mjeanroy:springmvc-mustache =0.6.0, =0.10.0, =0.10.0, =0.10.0, =1.0.0 -...
com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0), com.github.mjeanroy:springmvc-mustache-handlebars (>=0.10.0, <=1.0.0) +93 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (4.3.27.release)
org.springframework:spring-web MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.mjeanroy:springmvc-mustache =0.6.0, =0.10.0, =0.10.0, =0.10.0, =1.0.0 -...
com.github.dalet-oss:mongobee (>=1.0.1, <=1.0.4), com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0) +146 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (4.3.27.release)
org.springframework:spring-expression MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.github.dalet-oss:mongobee =1.0.1, =0.6.0, =0.10.0, =0.10.0, =0.10.0,...
This Week in Spring - SpringOne Essentials 2023 edition - January 24th, 2023
Hi, Spring fans! Welcome to another installment of This Week in Spring! Today is a very day for you see, today we kick off SpringOne Essentials, the online incarnation of SpringOne, online. We'll see you live, on stream, in just a few hours!. SpringOne Essentials is going to be amazing, but befor...
Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965)
Rapid7 has completed remediating the instances of Spring4Shell CVE-2022-22965 and Spring Cloud CVE-2022-22963 vulnerabilities that we found on our internet-facing services and systems. For further information and updates about our internal response to Spring4Shell, please see our post here. If yo...
TeaCMS suffers from SQL injection vulnerability (CNVD-2021-51349)
TeaCMS is a blog system developed by Spring-SpringMVC-MyBatis-MySQL database . TeaCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
