com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0), com.antgroup.tugraph:tugraph-db-java-rpc-client (>=1.1.0, <=1.2.1) +326 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.11.release)

org.springframework:spring-core MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.alibaba.compileflow:compileflow =1.0.0-rc1, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...