ROOT-APP-MAVEN-CVE-2021-22112 CVE-2021-22112 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2021-22112 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-22978 CVE-2022-22978 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2022-22978 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +10 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.0.2.release)

org.springframework.security:spring-security-web MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

co.paralleluniverse:comsat-spring-security (0.3.0), com.bq.corbel:oauth-server (>=1.31.1, <=1.35.0) +231 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.2.5.release)

org.springframework.security:spring-security-web MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - co.paralleluniverse:comsat-spring-security 0.3.0 -...

com.racquettrack:spring-security-oauth2-client (1.4), com.wichell:framework-web-security (1.0.0) +24 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.1.1.release)

org.springframework.security:spring-security-web MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.racquettrack:spring-security-oauth2-client 1.4 -...

at.researchstudio.sat:won-cryptography (0.3), at.researchstudio.sat:won-matcher (0.3) +728 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.3.release)

org.springframework.security:spring-security-web MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - at.researchstudio.sat:won-cryptography 0.3 -...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cosmicpush:push-server (3.1.4) +55 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.2.0.release)

org.springframework.security:spring-security-web MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...

africa.absa:inception-oauth2-resource-server (>=1.0.0, <=1.2.0), ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0) +10419 more potentially affected by CVE-2026-22732 via org.springframework.security:spring-security-web (>=3.2.8.release, <=6.5.8)

org.springframework.security:spring-security-web MAVEN version =3.2.8.release, =1.0.0, =4.4.0.0, =0.1.8, =0.1.6, =0.1.2, =0.5.0, =cloud-0.1, =j8.2.4.0, =j8.2.4.0, =j11.2.6.1 - ai.ylyue:yue-library-base j17.3.3.1 - ai.ylyue:yue-library-base-crypto j17.3.3.1 - ai.ylyue:yue-library-data-log j17.3.3....

com.aerse:gcless (11.2), com.hazelcast:hazelcast-wm (>=3.4, <=3.8.3) +99 more potentially affected by CVE-2026-22732 via org.springframework.security:spring-security-web (3.2.1.release)

org.springframework.security:spring-security-web MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.aerse:gcless 11.2 - com.hazelcast:hazelcast-wm =3.4...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +229 more potentially affected by CVE-2026-22732 via org.springframework.security:spring-security-web (4.0.3.release)

org.springframework.security:spring-security-web MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

com.racquettrack:spring-security-oauth2-client (1.4), com.wichell:framework-web-security (1.0.0) +24 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.1.1.release)

org.springframework.security:spring-security-web MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.racquettrack:spring-security-oauth2-client 1.4 -...

br.com.damsete:logging (0.0.2), br.com.damsete:spring-security-jwt (0.0.1) +1364 more potentially affected by CVE-2021-22112 via org.springframework.security:spring-security-web (>=5.3.0.release, <=5.3.7.release)

org.springframework.security:spring-security-web MAVEN version =5.3.0.release, =1.0.1, =0.5.0.release, =0.0.1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.3, =0.3, =0.3, =0.5 and more Source cves: CVE-2021-22112 Source advisory: OSV:GHSA-GQ28-H5VG-8PRX...