ROOT-APP-MAVEN-CVE-2022-22970 CVE-2022-22970 in org.springframework:spring-beans - Patched by Root

Root has patched CVE-2022-22970 in the org.springframework:spring-beans package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-22965 CVE-2022-22965 in org.springframework:spring-beans - Patched by Root

Root has patched CVE-2022-22965 in the org.springframework:spring-beans package for Root:Maven. Multiple fixed versions available...

org.springframework:spring-aop (2.0-m4), org.springframework:spring-beans (2.0-m4) +7 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0-m4)

org.springframework:spring-core MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-beans 2.0-m4 -...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-spring-boot-starter (0.2.0) +14303 more potentially affected by CVE-2025-41242 via org.springframework:spring-beans (>=6.2.0, <=6.2.9)

org.springframework:spring-beans MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2025-41242 Source advisory: MEND:CVE-2025-41242...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (>=0.2.0, <=0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +28321 more potentially affected by CVE-2025-41242 via org.springframework:spring-beans (>=6.0.0, <=6.2.9)

org.springframework:spring-beans MAVEN version =6.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.12.1 and more Source cves: CVE-2025-41242 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-12008931...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), ch.rasc:sse-eventbus (1.1.6) +1796 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.14.release)

org.springframework:spring-beans MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =1.0.0 -...

br.com.uol.reconf:reconf-spring (>=1.0.4, <=1.4.0), co.jirm:jirm-spring (>=0.0.1, <=0.0.8) +404 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.1.0.release)

org.springframework:spring-beans MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - br.com.uol.reconf:reconf-spring =1.0.4, =0.0.1, =1.1, =1.2, =1.1, =0.9.0, =0.9.0, =1.0,...

au.com.centrumsystems:build-pipeline-plugin (1.0), ch.ethz.origo:origo-issue-notifier (1.0) +1113 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (2.5)

org.springframework:spring-beans MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - au.com.centrumsystems:build-pipeline-plugin 1.0 - ch.ethz.origo:origo-issue-notifier 1.0 -...

ch.sbb.releasetrain:action (0.0.25), ch.sbb.releasetrain:config (0.0.25) +627 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.2.7.release)

org.springframework:spring-beans MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ch.sbb.releasetrain:action 0.0.25 - ch.sbb.releasetrain:config 0.0.25 -...

ch.ralscha:extdirectspring (1.5.0), cn.enilu:flash-core (1.0) +149 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.1.2.release)

org.springframework:spring-beans MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ch.ralscha:extdirectspring 1.5.0 - cn.enilu:flash-core 1.0 - cn.enilu:flash-generator 1...

com.aol.microservices:micro-general-exception-mapper (>=0.77, <=0.91.11), com.aol.microservices:micro-grizzly-with-jersey (>=0.62, <=0.91.8) +574 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.2.3.release)

org.springframework:spring-beans MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.aol.microservices:micro-general-exception-mapper =0.77, =0.62, =0.62, =0.91.3, =0.8...

ch.ralscha:extdirectspring (1.2.3), ch.tatool:tatool-app (>=1.3, <=1.3.2) +300 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.1.3.release)

org.springframework:spring-beans MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ch.ralscha:extdirectspring 1.2.3 - ch.tatool:tatool-app =1.3, =1.3, =1.3, =2.2.0-beta1,...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release), co.summit58.bpmn:camunda-engine (>=7.12.0, <=7.12.2) +207 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.2.18.release)

org.springframework:spring-beans MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release - co.summit58.bpmn:camunda-engin...

at.molindo.social:spring-social-security (1.1.0.release), cc.fozone.validation:fo-validation (>=0.9.0.release, <=0.9.1.release) +485 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.2.8.release)

org.springframework:spring-beans MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - at.molindo.social:spring-social-security 1.1.0.release -...

am.ik.blog:blog-domain (>=4.2.1, <=4.3.6), am.ik.blog:blog-mapper (>=4.4.1, <=4.5.0) +1398 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.11.release)

org.springframework:spring-beans MAVEN version 4.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - am.ik.blog:blog-domain =4.2.1, =4.4.1, =1.0.10, =0.2.13, =0.2.13, =0.2.13, =0.2.13,...

br.com.anteros:anteros-spring-swagger (1.0.0), cc.ereach:ereach-boot-starter-security (1.0.1) +355 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.0.9.release)

org.springframework:spring-beans MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - br.com.anteros:anteros-spring-swagger 1.0.0 - cc.ereach:ereach-boot-starter-security...

com.bekk.boss:maven-jetty-pluto-embedded (>=1.0, <=1.0.1), com.google.inject.integration:guice-spring (1.0) +57 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (2.0.2)

org.springframework:spring-beans MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.bekk.boss:maven-jetty-pluto-embedded =1.0, =5.0.0, =8.5.1.1, =8.5.1.1, =1.0.2, =1.1.1,...

au.com.mountain-pass:hyperstate (>=4, <=9), capital.scalable:spring-auto-restdocs-core (>=1.0.4, <=1.0.5) +985 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.2.6.release)

org.springframework:spring-beans MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - au.com.mountain-pass:hyperstate =4, =1.0.4, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =0.0.21...

ar.com.fdvs:dynamicjasper (>=5.0.9, <=5.1.0), br.com.caelum.stella:caelum-stella-boleto (>=2.1.7, <=2.2.2) +861 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (3.0.6.release)

org.springframework:spring-beans MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - ar.com.fdvs:dynamicjasper =5.0.9, =2.1.7, =20.3.0, =20.3.0, =2.23.5, =2.23.5, =18.4.0,...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-application (>=1.0.0, <=1.2.0) +16940 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (>=5.3.0, <=5.3.19)

org.springframework:spring-beans MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2022-22970 Source advisory: GHSA-HH26-6XWR-GGV7...