com.antgroup.tugraph:tugraph-db-java-rpc-client (>=1.1.0, <=1.2.1), com.antgroup.tugraph:tugraph-db-java-rpc-client-test (>=1.1.0, <=1.2.1) +161 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (3.2.11.release)

org.springframework:spring-web MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.antgroup.tugraph:tugraph-db-java-rpc-client =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...

com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0), com.antgroup.tugraph:tugraph-db-java-rpc-client (>=1.1.0, <=1.2.1) +326 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.11.release)

org.springframework:spring-core MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.alibaba.compileflow:compileflow =1.0.0-rc1, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...