ca.islandora.indexing:islandora-indexing-triplestore (>=0.0.1, <=0.0.2), com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0) +316 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (3.2.11.release)

org.springframework:spring-expression MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.islandora.indexing:islandora-indexing-triplestore =0.0.1, =1.0.0-rc1,...

com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0), com.antgroup.tugraph:tugraph-db-java-rpc-client (>=1.1.0, <=1.2.1) +326 more potentially affected by CVE-2016-5007 via org.springframework:spring-core (3.2.11.release)

org.springframework:spring-core MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.alibaba.compileflow:compileflow =1.0.0-rc1, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...

com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0), com.antgroup.tugraph:tugraph-db-java-rpc-client (>=1.1.0, <=1.2.1) +326 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (3.2.11.release)

org.springframework:spring-core MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.alibaba.compileflow:compileflow =1.0.0-rc1, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...