com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (0.0.15), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (0.0.15) +67 more potentially affected by CVE-2026-40972 via org.springframework.boot:spring-boot-devtools (1.3.5.release)

org.springframework.boot:spring-boot-devtools MAVEN version 1.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-devtools and may be impacted: -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (0.0.16), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (0.0.16) +103 more potentially affected by CVE-2026-40972 via org.springframework.boot:spring-boot-devtools (1.4.0.release)

org.springframework.boot:spring-boot-devtools MAVEN version 1.4.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-devtools and may be impacted: -...

Code Injection

org.apereo.cas:cas-management-webapp-support is vulnerable to Code Injection. The vulnerability is due to improper input handling due to unsanitized Groovy code execution in the saveService function, which allows remote attackers to inject and execute arbitrary code...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3985 via org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0.m1, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3985 Source advisory: GHSA-8RX4-FXQ5-VJ4V...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3985 via org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0.m1, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3985 Source advisory: OSV:GHSA-8RX4-FXQ5-VJ4V...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3984 via org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0.m1, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3984 Source advisory: OSV:GHSA-37PQ-893F-G7Q5...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.10) potentially affected by CVE-2025-3984 via org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.10)

org.apereo.cas:cas-management-webapp-support MAVEN version =5.0.0.m1, =5.0.0.m1, =5.0.10 Source cves: CVE-2025-3984 Source advisory: SNYK:JAVA-ORGAPEREOCAS-9893219...

io.buji:buji-pac4j (2.2.0), org.apereo.cas:cas-management-webapp (>=5.0.6, <=5.0.10) +97 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.9.7)

org.pac4j:pac4j-core MAVEN version 1.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 2.2.0 - org.apereo.cas:cas-management-webapp =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6,...

org.jasig.cas:cas-management-webapp (>=4.0.0-rc1, <=4.0.7), org.jasig.cas:cas-server-webapp (>=3.5.1-rc1, <=3.6.0) potentially affected by CVE-2023-34613 via net.sf.sojo:sojo (1.0.5)

net.sf.sojo:sojo MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.sojo:sojo and may be impacted: - org.jasig.cas:cas-management-webapp =4.0.0-rc1, =3.5.1-rc1, =3.6.0 Source cves: CVE-2023-34613 Source advisory:...

org.jasig.cas:cas-management-webapp (>=4.0.0-rc1, <=4.0.7), org.jasig.cas:cas-server-webapp (>=3.5.1-rc1, <=3.6.0) potentially affected by CVE-2023-34613 via net.sf.sojo:sojo (1.0.5)

net.sf.sojo:sojo MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.sojo:sojo and may be impacted: - org.jasig.cas:cas-management-webapp =4.0.0-rc1, =3.5.1-rc1, =3.6.0 Source cves: CVE-2023-34613 Source advisory:...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.3.0-rc3)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc3 Source cves:...

org.apereo.cas:cas-management-webapp-configuration (5.3.1), org.apereo.cas:cas-management-webapp-support (5.3.1) +158 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.3.1)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.1 -...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.3.0-rc3)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.0.rc3), org.apereo.cas:cas-management-webapp-support (5.0.0.rc3) +75 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.0.rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc3 -...

org.apereo.cas:cas-management-webapp-support (5.1.0), org.apereo.cas:cas-server-core (5.1.0) +113 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0 - org.apereo.cas:cas-server-core 5.1.0 -...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc3 Source cves: CVE-2021-42567 Sour...

org.jasig.cas:cas-management-webapp (>=4.0.0-rc1, <=4.0.0-rc3) potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.1.2.release)

org.springframework.security:spring-security-cas MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - org.jasig.cas:cas-management-webapp =4.0.0-rc1,...

org.jasig.cas:cas-management-webapp (>=4.0.0-rc4, <=4.0.7) potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.2.0.release)

org.springframework.security:spring-security-cas MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - org.jasig.cas:cas-management-webapp =4.0.0-rc4, =4.0.7...