br.com.ideotech:draw-out-spring-boot-aop (>=1.5.19.release, <=1.5.19-4.release), br.com.ideotech:draw-out-spring-boot-lib (>=1.5.19.release, <=1.5.19-4.release) +793 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (4.3.22.release)

org.springframework:spring-context MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - br.com.ideotech:draw-out-spring-boot-aop =1.5.19.release, =1.5.19.release,...

br.com.anteros:anteros-spring-swagger (1.0.0), cc.ereach:ereach-boot-starter-security (1.0.1) +409 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (4.0.9.release)

org.springframework:spring-context MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - br.com.anteros:anteros-spring-swagger 1.0.0 - cc.ereach:ereach-boot-starter-securit...

at.molindo:molindo-notify (>=1.0.0-alpha-3, <=2.0.0), com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3) +86 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (4.0.4.release)

org.springframework:spring-context MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:molindo-notify =1.0.0-alpha-3, =0.10.1, =0.10.1, =1.0.0, =1.0.0, =1.0.0,...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release), com.alibaba.csb.sdk:java (1.1.5.11) +142 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (3.2.18.release)

org.springframework:spring-context MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release - com.alibaba.csb.sdk:java...

br.com.neppo.jlibs:jira-client (1.0), cn.chenzw.swagger:swagger-ext-all (1.0.1) +490 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (4.3.24.release)

org.springframework:spring-context MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - br.com.neppo.jlibs:jira-client 1.0 - cn.chenzw.swagger:swagger-ext-all 1.0.1 -...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cedarsoftware:json-command-servlet (>=1.0.0, <=1.1.2) +178 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (3.2.6.release)

org.springframework:spring-context MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...

net.sf.hermesftp:hermesftp (0.7), net.sf.ldaptemplate:ldaptemplate (>=1.0-rc1, <=1.0.2) +20 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (1.2.6)

org.springframework:spring-context MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - net.sf.hermesftp:hermesftp 0.7 - net.sf.ldaptemplate:ldaptemplate =1.0-rc1, =1.7, =1.10.1 -...

com.commercetools.sdk.jvm.spring:commercetools-spring-batch-add-ons (>=0.2.0, <=0.4.0), com.eclecticlogic:pedal (>=1.1.0, <=1.4.0) +416 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (4.0.5.release)

org.springframework:spring-context MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.commercetools.sdk.jvm.spring:commercetools-spring-batch-add-ons =0.2.0, =1.1.0,...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0, <=0.2.0), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0, <=0.2.0) potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.1.0-rc1)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.1.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0, =0.1.0, =0.2.0 Source...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.3, <=0.2.3), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.3, <=0.2.3) +20 more potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.3.3)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.3, =0.1.3, =2.2.2-incubating...

cn.dynamictp:dynamic-tp-example-nacos (>=1.0.8, <=1.1.2), com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.6, <=0.2.7) +27 more potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.3.6)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - cn.dynamictp:dynamic-tp-example-nacos =1.0.8, =0.1.6, =0.1.6, =2.0.0-beta1,...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0-rc1, <=0.2.0-rc1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0-rc1, <=0.2.0-rc1) potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.2.1-rc1)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.2.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0-rc1, =0.1.0-rc1,...

cc.ereach:ereach-boot-starter-dubbo (1.0.1), cc.ereach:ereach-boot-starter-env (1.0.1) +30 more potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (>=1.1.0, <=1.1.1)

com.alibaba.nacos:nacos-spring-context MAVEN version =1.1.0, =3.0.9, =3.0.1, =3.0.1, =3.0.1, =0.1.8, =0.1.8, =0.1.10, =0.1.10, =0.1.10, =0.1.10, =5.3.0, =6.0 - com.niezhiliang:nacos-config-refresh-spring-boot-starter 0.1.1 and more Source cves: CVE-2023-39106 Source advisory: GHSA-V6C8-PWHQ-288M...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.1, <=0.2.1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.1, <=0.2.1) +2 more potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.2.2-rc1)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.2.2-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.1, =0.1.1, =1.1.2, =1.1....

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.4, <=0.2.4), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.4, <=0.2.4) potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.3.4)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.4, =0.1.4, =0.2.4 Source cve...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.2, <=0.2.2), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.2, <=0.2.2) potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (0.3.1)

com.alibaba.nacos:nacos-spring-context MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-spring-context and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.2, =0.1.2, =0.2.2 Source cve...

cc.ereach:ereach-boot-starter-dubbo (1.0.1), cc.ereach:ereach-boot-starter-env (1.0.1) +30 more potentially affected by CVE-2023-39106 via com.alibaba.nacos:nacos-spring-context (>=1.1.0, <=1.1.1)

com.alibaba.nacos:nacos-spring-context MAVEN version =1.1.0, =3.0.9, =3.0.1, =3.0.1, =3.0.1, =0.1.8, =0.1.8, =0.1.10, =0.1.10, =0.1.10, =0.1.10, =5.3.0, =6.0 - com.niezhiliang:nacos-config-refresh-spring-boot-starter 0.1.1 and more Source cves: CVE-2023-39106 Source advisory: OSV:GHSA-V6C8-PWHQ-2...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0-rc1, <=0.2.1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0-rc1, <=0.2.1) +3 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (0.2.1-rc1)

com.alibaba.nacos:nacos-client MAVEN version 0.2.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.3, <=0.2.3), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.3, <=0.2.3) +63 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (1.1.3)

com.alibaba.nacos:nacos-client MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.3, =0.1.3, =2.7.7, =1.0.0, =1.0.0, =1.0.0,...

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2011-2730 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...