com.epam.reportportal:commons-bugtracking (>=4.0.0, <=4.0.4), com.sinsz.c:bxfs-mongodb (1.0.1) +10 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking =4.0.0, =1.2, =2.6.0...