EUVD-2022-6510

Malicious code in bioql PyPI...

EUVD-2022-6519

Malicious code in bioql PyPI...

org.dspace:dspace-jspui-api (1.6.1), org.dspace:dspace-jspui-webapp (1.6.1) +9 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.6.1)

org.dspace:dspace-api MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.6.1 - org.dspace:dspace-jspui-webapp 1.6.1 - org.dspace:dspace-lni-core 1.6.1 -...

org.dspace:dspace (1.5-alpha), org.dspace:dspace-jspui (1.5-alpha) +10 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.5-alpha)

org.dspace:dspace-api MAVEN version 1.5-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace 1.5-alpha - org.dspace:dspace-jspui 1.5-alpha - org.dspace:dspace-lni 1.5-alpha -...

org.dspace.modules:additions (3.0-rc3), org.dspace.modules:jspui (3.0-rc3) +12 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (3.0-rc3)

org.dspace:dspace-api MAVEN version 3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 3.0-rc3 - org.dspace.modules:jspui 3.0-rc3 - org.dspace.modules:lni 3.0-rc3 -...

org.dspace.modules:jspui (1.7.0-rc2), org.dspace.modules:lni (1.7.0-rc2) +19 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.7.0-rc2)

org.dspace:dspace-api MAVEN version 1.7.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.7.0-rc2 - org.dspace.modules:lni 1.7.0-rc2 - org.dspace.modules:oai 1.7.0-rc2 -...

org.dspace.modules:jspui (1.7.2), org.dspace.modules:lni (1.7.2) +19 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.7.2)

org.dspace:dspace-api MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.7.2 - org.dspace.modules:lni 1.7.2 - org.dspace.modules:oai 1.7.2 - org.dspace.modules:swo...

org.dspace:dspace-jspui-api (1.5.2), org.dspace:dspace-jspui-webapp (1.5.2) +8 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.5.2)

org.dspace:dspace-api MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.2 - org.dspace:dspace-jspui-webapp 1.5.2 - org.dspace:dspace-lni-core 1.5.2 -...

org.dspace:dspace-jspui-api (1.5.2-rc1), org.dspace:dspace-jspui-webapp (1.5.2-rc1) +8 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.5.2-rc1)

org.dspace:dspace-api MAVEN version 1.5.2-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.2-rc1 - org.dspace:dspace-jspui-webapp 1.5.2-rc1 - org.dspace:dspace-lni-core...

org.dspace.modules:jspui (1.7.0), org.dspace.modules:lni (1.7.0) +19 more potentially affected by CVE-2025-53621 via org.dspace:dspace-api (1.7.0)

org.dspace:dspace-api MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.7.0 - org.dspace.modules:lni 1.7.0 - org.dspace.modules:oai 1.7.0 - org.dspace.modules:swo...

org.dspace.modules:jspui (1.7.2), org.dspace.modules:lni (1.7.2) +19 more potentially affected by CVE-2025-53621 via org.dspace:dspace-api (1.7.2)

org.dspace:dspace-api MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.7.2 - org.dspace.modules:lni 1.7.2 - org.dspace.modules:oai 1.7.2 - org.dspace.modules:swo...

org.dspace:dspace-discovery-provider (1.7.0-rc1), org.dspace:dspace-discovery-xmlui-api (1.7.0-rc1) +13 more potentially affected by CVE-2025-53621 via org.dspace:dspace-api (1.7.0-rc1)

org.dspace:dspace-api MAVEN version 1.7.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-discovery-provider 1.7.0-rc1 - org.dspace:dspace-discovery-xmlui-api 1.7.0-rc1 -...

org.dspace.modules:jspui (1.8.0-rc3), org.dspace.modules:lni (1.8.0-rc3) +25 more potentially affected by CVE-2025-53621 via org.dspace:dspace-api (1.8.0-rc3)

org.dspace:dspace-api MAVEN version 1.8.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.8.0-rc3 - org.dspace.modules:lni 1.8.0-rc3 - org.dspace.modules:oai 1.8.0-rc3 -...

org.dspace:dspace (1.5-alpha), org.dspace:dspace-jspui (1.5-alpha) +10 more potentially affected by CVE-2025-53621 via org.dspace:dspace-api (1.5-alpha)

org.dspace:dspace-api MAVEN version 1.5-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace 1.5-alpha - org.dspace:dspace-jspui 1.5-alpha - org.dspace:dspace-lni 1.5-alpha -...

org.dspace:dspace-jspui-api (1.5.0-beta1), org.dspace:dspace-jspui-webapp (1.5.0-beta1) +10 more potentially affected by CVE-2025-53621 via org.dspace:dspace-api (1.5.0-beta1)

org.dspace:dspace-api MAVEN version 1.5.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.0-beta1 - org.dspace:dspace-jspui-webapp 1.5.0-beta1 -...

org.dspace.modules:jspui (1.7.3), org.dspace.modules:lni (1.7.3) +19 more potentially affected by CVE-2025-53621 via org.dspace:dspace-api (1.7.3)

org.dspace:dspace-api MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.7.3 - org.dspace.modules:lni 1.7.3 - org.dspace.modules:oai 1.7.3 - org.dspace.modules:swo...

CVE-2022-31190

DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affected versions metadata on a withdrawn Item is exposed via the XMLUI "mets.xml" object, as long as you know the handle/URL of the withdrawn...

DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import

Impact ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be created anywhere the Tomcat/DSpace user can write to on the server. However, this path traversal vulnerability is only possible...

GHSA-8RMH-55H4-93H5 DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import

Impact ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be created anywhere the Tomcat/DSpace user can write to on the server. However, this path traversal vulnerability is only possible...

org.dataone.dspace:auto-versioning-xmlui (>=5.4.0, <=5.4.2), org.dspace.modules:xmlui (>=4.0, <=6.3) potentially affected by CVE-2022-31190 via org.dspace:dspace-xmlui (>=4.0, <=6.3)

org.dspace:dspace-xmlui MAVEN version =4.0, =5.4.0, =4.0, =6.3 Source cves: CVE-2022-31190 Source advisory: GHSA-7W85-PP86-P4PQ...