at.molindo:spring-data-custom (1.0.0), at.researchstudio.sat:won-core (>=0.2, <=0.3) +1477 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.8.release)

org.springframework:spring-context MAVEN version 4.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:spring-data-custom 1.0.0 - at.researchstudio.sat:won-core =0.2, =0.2,...

am.ik.blog:blog-domain (>=4.0.2, <=4.2.0), am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0) +1739 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.7.release)

org.springframework:spring-context MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - am.ik.blog:blog-domain =4.0.2, =4.0.0, =2.0.0, =1.0.3, =1.0.0, =2.4, =2.4, =2.4,...

at.molindo:spring-data-custom (0.1.0), be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6) +1143 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.4.release)

org.springframework:spring-context MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:spring-data-custom 0.1.0 - be.looorent:jflu-producer-springmvc =0.1,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-spring-boot-starter (0.2.0) +10626 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.2.0, <=6.2.6)

org.springframework:spring-context MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2024-38820, CVE-2025-22233 Source advisory: GHSA-4WP7-92PW-Q264...

ai.optfor:spring-openai-api (>=0.1.3, <=0.3.25), ai.stapi:arango-axon (>=0.0.1, <=0.0.2) +9653 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (>=6.0.0, <=6.0.23)

org.springframework:spring-context MAVEN version =6.0.0, =0.1.3, =0.0.1, =0.0.1, =0.0.10, =0.0.10, =0.0.10, =0.0.6, =0.0.6, =0.0.28, =0.0.6, =0.0.7, =0.0.8, =0.0.11, =0.0.6, =0.3.2 - ai.superstream:spring-kafka 3.0.1-alpha1 and more Source cves: CVE-2025-22233 Source advisory:...

ca.islandora.indexing:islandora-indexing-triplestore (>=0.0.1, <=0.0.2), com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0) +317 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.11.release)

org.springframework:spring-context MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.islandora.indexing:islandora-indexing-triplestore =0.0.1, =1.0.0-rc1, =1.1.0,...

com.att.nsa:msgrtr (0.0.5), com.comcast.magic-wand:appium (>=4.0.1, <=4.0.3) +101 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.14.release)

org.springframework:spring-context MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.att.nsa:msgrtr 0.0.5 - com.comcast.magic-wand:appium =4.0.1, =1.0.8, =2.0.1,...

cn.jairdavis:jair-common-utils (1.0.4), com.aerse:gcless (11.2) +172 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.0.2.release)

org.springframework:spring-context MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cn.jairdavis:jair-common-utils 1.0.4 - com.aerse:gcless 11.2 -...

org.springframework:spring-dao (2.0-m4), org.springframework:spring-hibernate3 (2.0-m4) +4 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.0-m4)

org.springframework:spring-context MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.springframework:spring-dao 2.0-m4 - org.springframework:spring-hibernate3 2.0-m4 -...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-core (1.1.4.release) +434 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.8.release)

org.springframework:spring-context MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

at.molindo:molindo-notify (2.1.0), ch.powerunit.extensions:powerunit-extensions-spring (0.0.1) +628 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.7.release)

org.springframework:spring-context MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:molindo-notify 2.1.0 - ch.powerunit.extensions:powerunit-extensions-spri...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release), com.alibaba.csb.sdk:java (1.1.5.11) +142 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.18.release)

org.springframework:spring-context MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release - com.alibaba.csb.sdk:java...

ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1), ch.epfl.bbp.nlp:bluima_corpora (>=1.0.0, <=1.0.1) +734 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.1.2.release)

org.springframework:spring-context MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.epfl.bbp.nlp:bluimaabbreviations =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +143 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.5.1)

org.springframework:spring-context MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.2.1, =0.7, =1.3, =2.0, =2.0,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-spring-boot-starter (0.2.0) +10626 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.2.0, <=6.2.6)

org.springframework:spring-context MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2024-38820, CVE-2025-22233 Source advisory: MEND:CVE-2025-22233...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +15683 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.1.0, <=6.1.19)

org.springframework:spring-context MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0-beta.2 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 and more Source cves:...

Improper Handling of Case Sensitivity

Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to an incomplete fix for CVE-2024-38820, where it is still possible to bypass the disallowedFields checks. Note: This vulnerability was also fixed in commercial versions 6.0.28 and 5.3.43...

com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4) +63 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (3.2.7.release)

org.springframework:spring-context MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.alibaba.citrus:citrus-springext-all =3.1.6, =3.1.6, =3.1.6, =0.10.0, =1.0,...

at.rocklogic.kafka:object-support (>=0.2, <=1.1), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.0) +586 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (4.1.5.release)

org.springframework:spring-context MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.rocklogic.kafka:object-support =0.2, =0.1.0, =1.3.5 -...

com.dtflys.forest:forest-spring (1.0.0), com.garethahealy.amq6-dual-jaas-plugin:amq6-dual-jaas-plugin-parent (>=1.2.0-beta2, <=1.4.0) +558 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (3.2.16.release)

org.springframework:spring-context MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.dtflys.forest:forest-spring 1.0.0 -...