cn.herodotus.engine:oauth2-sdk-authorization (>=2.7.0.beta4, <=2.7.0.10), cn.herodotus.engine:oauth2-sdk-authorization-server (>=2.7.0.beta4, <=2.7.0.10) +2 more potentially affected by CVE-2024-22258 via org.springframework.security:spring-security-oauth2-authorization-server (0.2.3)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-authorization-server and may be impacted: -...

cn.herodotus.engine:oauth2-sdk-authorization-server (2.7.0.beta3), cn.herodotus.engine:oauth2-sdk-data-jpa (2.7.0.beta3) potentially affected by CVE-2024-22258 via org.springframework.security:spring-security-oauth2-authorization-server (0.2.2)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-authorization-server and may be impacted: -...

cn.herodotus.engine:oauth2-sdk-authorization (>=2.7.0.20, <=2.7.0.50), cn.herodotus.engine:oauth2-sdk-authorization-server (>=2.7.0.20, <=2.7.0.50) +3 more potentially affected by CVE-2024-22258 via org.springframework.security:spring-security-oauth2-authorization-server (0.3.0)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-authorization-server and may be impacted: -...