de.fhg.fokus.nubomedia:nubomedia-media-client (>=1.0, <=6.6.0), org.springframework.boot:spring-boot-starter-websocket (1.2.7.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.1.8.release)

org.springframework:spring-websocket MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - de.fhg.fokus.nubomedia:nubomedia-media-client =1.0, =4.1.7.release,...

org.springframework.boot:spring-boot-starter-websocket (>=1.1.11.release, <=1.1.12.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.0.9.release)

org.springframework:spring-websocket MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.11.release,...

org.springframework.boot:spring-boot-starter-websocket (>=1.1.9.release, <=1.1.10.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.0.8.release)

org.springframework:spring-websocket MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.9.release,...

com.consol.citrus:citrus-websocket (2.7.3), com.estafet.microservices.scrum:microservices-scrum-parent-db (>=1.0.0, <=1.0.4) +236 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.11.release)

org.springframework:spring-websocket MAVEN version 4.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.consol.citrus:citrus-websocket 2.7.3 -...

at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21) +927 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=6.2.0, <=6.2.11)

org.springframework:spring-websocket MAVEN version =6.2.0, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2025-41254 Source advisory: MEND:CVE-2025-41254...

Cross-site Request Forgery (CSRF)

Overview org.springframework:spring-websocket is a framework that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF vi...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), br.com.m4rc310:br-com-m4rc310-graphql (1.0.1) +1237 more potentially affected by CVE-2024-38820 via org.springframework:spring-websocket (>=5.3.0, <=5.3.39)

org.springframework:spring-websocket MAVEN version =5.3.0, =4.4.0.2, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.2.0, =6.8.0, =6.4.0, =5.3.0, =6.10.5 and more Source cves: CVE-2024-38820 Source advisory: MEND:CVE-2024-38820...

org.springframework.security:spring-security-cas (5.0.18.release), org.springframework.security:spring-security-oauth2-client (5.0.18.release) +8 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.18.release)

org.springframework:spring-web MAVEN version 5.0.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework.security:spring-security-cas 5.0.18.release -...

org.springframework:spring-webflux (5.3.38), org.springframework:spring-webmvc (5.3.38) +1 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.38)

org.springframework:spring-web MAVEN version 5.3.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-webflux 5.3.38 - org.springframework:spring-webmvc 5.3.38 -...

com.languageweaver.sdk:auth (>=1.5, <=2.2), com.mercateo.rest:rest-schemagen-spring (0.3.0) +5 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.20.release)

org.springframework:spring-web MAVEN version 5.0.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.languageweaver.sdk:auth =1.5, =1.0.6, =1.0.7 - org.springframework:spring-webflux...

io.github.opensabre:common-web (>=0.0.1, <=0.0.2), org.springframework.security:spring-security-cas (>=5.0.16.release, <=5.0.17.release) +9 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.17.release)

org.springframework:spring-web MAVEN version 5.0.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - io.github.opensabre:common-web =0.0.1, =5.0.16.release, =5.0.16.release, =5.0.16.release,...