ff4j__ff4j_CVE-2022-44262_1-8-13

✨✨✨ FF4J - Feature Flipping for Java ✨✨✨ Codacy Badge FF4j, is an implementation of the Feature Toggle pattern. 🤘Features Feature Toggle: Enable. and disable features at runtime - no deployments. In your code implement multiple paths protected by dynamic predicates if/then/else. Role-based...

RHLW-2026-A06FD4CFDAB7EF70 Lightwell Security Advisory: spring-aop 5.3.18.rhlw-00010

Red Hat Lightwell has released org.springframework:spring-aop 5.3.18.rhlw-00010 with a backported security fix. CVE-2016-1000027: Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution RCE issue if used for Java deserialization of untrusted data. Depending on how t...

org.springframework:spring-aop (2.0-m1), org.springframework:spring-beans (2.0-m1) +13 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0-m1)

org.springframework:spring-core MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-beans 2.0-m1 -...

com.gestalt.common.injection:common-injection-spring-impl (0.8), com.google.code.struts2webflow:struts2webflow-parent (1.0.4) +39 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0.1)

org.springframework:spring-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.gestalt.common.injection:common-injection-spring-impl 0.8 -...

org.springframework:spring-aop (1.2.1), org.springframework:spring-beans (1.2.1) +10 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2.1)

org.springframework:spring-core MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.1 - org.springframework:spring-beans 1.2.1 -...

org.springframework:spring-aop (1.2.4), org.springframework:spring-beans (1.2.4) +10 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2.4)

org.springframework:spring-core MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.4 - org.springframework:spring-beans 1.2.4 -...

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...

org.jasig.service:person-directory (1.0.1), org.jasig:person-directory (1.0.0) +26 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0.3)

org.springframework:spring-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.jasig.service:person-directory 1.0.1 - org.jasig:person-directory 1.0.0 -...

org.acegisecurity:acegi-security-tiger (1.0.0-rc1), org.apache.directory.mina:mina-integration-spring (>=0.9.1, <=0.9.5) +23 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2.5)

org.springframework:spring-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security-tiger 1.0.0-rc1 -...

EUVD-2020-0399

Malware in sbrugna...

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2011-2730 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...

org.springframework:spring-aop (1.2.3), org.springframework:spring-beans (1.2.3) +10 more potentially affected by CVE-2011-2730 via org.springframework:spring-core (1.2.3)

org.springframework:spring-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.3 - org.springframework:spring-beans 1.2.3 -...

org.springframework:spring-aop (1.2.3), org.springframework:spring-context (1.2.3) +9 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (1.2.3)

org.springframework:spring-beans MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.springframework:spring-aop 1.2.3 - org.springframework:spring-context 1.2.3 -...

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +19 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (2.0-m2)

org.springframework:spring-beans MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0 - org.acegisecurity:acegi-security-adapter...

org.springframework:spring-aop (2.0-m4), org.springframework:spring-context (2.0-m4) +6 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (2.0-m4)

org.springframework:spring-beans MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-context 2.0-m4 -...

org.springframework:spring-aop (1.2.2), org.springframework:spring-context (1.2.2) +9 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (1.2.2)

org.springframework:spring-beans MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-context 1.2.2 -...

org.springframework:spring-aop (1.2.4), org.springframework:spring-context (1.2.4) +9 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (1.2.4)

org.springframework:spring-beans MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.springframework:spring-aop 1.2.4 - org.springframework:spring-context 1.2.4 -...

org.springframework:spring-aop (2.0-m1), org.springframework:spring-context (2.0-m1) +12 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (2.0-m1)

org.springframework:spring-beans MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-context 2.0-m1 -...

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +19 more potentially affected by CVE-2022-22965 via org.springframework:spring-beans (2.0-m2)

org.springframework:spring-beans MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0 - org.acegisecurity:acegi-security-adapter...

PT-2021-22439

Name of the Vulnerable Software and Affected Versions OpenOlat versions prior to 15.3.18, 15.5.3, and 16.0.0 Description OpenOlat is a web-based learning management system. The issue allows an attacker to execute arbitrary code using a prepared import XML file, such as a course, which can...