ROOT-APP-MAVEN-CVE-2022-22968 CVE-2022-22968 in org.springframework:spring-context - Patched by Root

Root has patched CVE-2022-22968 in the org.springframework:spring-context package for Root:Maven. Multiple fixed versions available...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +2075 more potentially affected by CVE-2026-59280 via org.springframework:spring-context-support (>=7.0.0, <=7.0.8)

org.springframework:spring-context-support MAVEN version =7.0.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0-alpha-springboot4, =22.0.0-alpha-springboot4, =1.5.0, =1.7.0 and more Source cves: CVE-2026-59280 Source advisory: MEND:CVE-2026-59280...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +2081 more potentially affected by CVE-2026-59280 via org.springframework:spring-context-support (>=7.0.0-m1, <=7.0.8)

org.springframework:spring-context-support MAVEN version =7.0.0-m1, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =3.0.0-alpha-springboot4, =22.0.0-alpha-springboot4, =24.19.0 and more Source cves: CVE-2026-59280 Source advisory:...

org.springframework:spring-aop (2.0-m4), org.springframework:spring-beans (2.0-m4) +7 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0-m4)

org.springframework:spring-core MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-beans 2.0-m4 -...

org.apache.cocoon:cocoon-ajax-impl (1.0.0-m3), org.apache.cocoon:cocoon-apples-impl (1.0.0-rc1) +125 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.0.5)

org.springframework:spring-context MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.apache.cocoon:cocoon-ajax-impl 1.0.0-m3 - org.apache.cocoon:cocoon-apples-impl 1.0.0-rc...

cn.wizzer.app:wk-common (>=5.1.5, <=5.2.8-zookeeper), cn.wizzer.app:wk-nb-service-cms (>=5.1.5, <=5.2.8-zookeeper) +349 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.21.release)

org.springframework:spring-context MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cn.wizzer.app:wk-common =5.1.5, =5.1.5, =5.1.5, =5.1.5, =5.1.5, =5.1.5, =5.1.5,...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.27), be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3) +687 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.0.7.release)

org.springframework:spring-context MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ar.com.jmfsg:api-doc =0.0.20, =0.3.3, =1.0.14, =1.0, =3.0.10, =3.0.10, =3.0.10,...

be.personify.iam:personify-api (>=1.0.2.release, <=1.0.8.release), club.trandiscuss:api-doc-gen (0.1) +810 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.25.release)

org.springframework:spring-context MAVEN version 4.3.25.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - be.personify.iam:personify-api =1.0.2.release, =2.2.1zzlh, =2.2.1zzlh, =1.4.2,...

ch.rasc:sse-eventbus (1.1.9), com.atlassian.oai:swagger-request-validator-examples (>=2.9.1, <=2.13.0) +481 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.26.release)

org.springframework:spring-context MAVEN version 4.3.26.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.rasc:sse-eventbus 1.1.9 - com.atlassian.oai:swagger-request-validator-examples...

be.eliwan:ew-profiling-api (>=1.0, <=1.4), be.eliwan:ew-profiling-core (>=1.0, <=1.4) +1259 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.0.5.release)

org.springframework:spring-context MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - be.eliwan:ew-profiling-api =1.0, =1.0, =2.0-beta1, =1.1.1, =1.0.2, =1.1.2, =1.2,...

ca.grimoire:mainspring (>=1.0, <=1.0.4), ch.nerdin:testdata-framework (0.10) +1319 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.5.6)

org.springframework:spring-context MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.grimoire:mainspring =1.0, =2.1.0, =1.2.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =1.0.7 -...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-apm (>=1.5.13, <=1.5.13.2) +843 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.17.release)

org.springframework:spring-context MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-apm =1.5.13, =1.5.13, =1.5.13, =1.5.13,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +15683 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.1.0, <=6.1.19)

org.springframework:spring-context MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0-beta.2 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 and more Source cves:...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), ch.rasc:sse-eventbus (1.1.6) +1661 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.14.release)

org.springframework:spring-context MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =1.0.0 -...

cc.akkaha:pea-dubbo_2.12 (>=0.6.0, <=0.7.0), cc.akkaha:pea_2.12 (>=0.6.0, <=0.7.0) +1227 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.16.release)

org.springframework:spring-context MAVEN version 4.3.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cc.akkaha:pea-dubbo2.12 =0.6.0, =0.6.0, =v1.0.0, =1.0.0, =0.0.8.oss, =0.0.1, =0.0....

com.github.skeychen:dswork-common-ssosdk (>=9.0.1, <=9.1.1), com.github.skeychen:dswork-config (>=9.0.1, <=9.1.1) +130 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.28.release)

org.springframework:spring-context MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.github.skeychen:dswork-common-ssosdk =9.0.1, =9.0.1, =9.0.1, =9.0.1, =9.0.1,...

br.com.uol.reconf:reconf-spring (>=1.0.4, <=1.4.0), co.jirm:jirm-spring (>=0.0.1, <=0.0.8) +392 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.1.0.release)

org.springframework:spring-context MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - br.com.uol.reconf:reconf-spring =1.0.4, =0.0.1, =1.1, =1.2, =1.1, =0.9.0, =0.9.0,...

am.ik.blog:blog-domain (>=4.0.2, <=4.2.0), am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0) +1739 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.7.release)

org.springframework:spring-context MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - am.ik.blog:blog-domain =4.0.2, =4.0.0, =2.0.0, =1.0.3, =1.0.0, =2.4, =2.4, =2.4,...

ch.ralscha:extdirectspring (1.5.0), cn.enilu:flash-core (1.0) +139 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.2.release)

org.springframework:spring-context MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.ralscha:extdirectspring 1.5.0 - cn.enilu:flash-core 1.0 - cn.enilu:flash-generat...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1414 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.5.6.sec03)

org.springframework:spring-context MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.0, =1.0, =0.0.1...