Memory corruption

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (j11.2.6.0) +1765 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=2.6.0, <=2.6.5)

org.springframework.boot:spring-boot-starter-web MAVEN version =2.6.0, =4.4.0.2, =1.2.5.release, =0.1.2, =5.7.7, =5.7.7, =5.7.7, =1.0.0, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2022-22965 Source advisory: MEND:CVE-2022-22965...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +12682 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=1.0.0.release, <=2.5.11)

org.springframework.boot:spring-boot-starter-web MAVEN version =1.0.0.release, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =greenwich.sr2.1 and more Source cves: CVE-2022-22965 Source advisory:...

club.zhcs:axe-swagger (>=1.5.13, <=1.5.13.2), club.zhcs:axe-validation (>=1.5.13, <=1.5.13.2) +368 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.13.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - club.zhcs:axe-swagger =1.5.13, =1.5.13, =0.0.7.release...

com.github.mkopylec:charon-spring-boot-starter (>=2.4.0, <=2.5.0), com.github.ulisesbocchio:spring-boot-security-saml (>=1.14, <=1.15) +77 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.11.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.github.mkopylec:charon-spring-boot-starter =2.4.0,...

ch.sbb.releasetrain:jsfbootadapter (0.0.25), ch.sbb.releasetrain:webui (0.0.25) +138 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.3.6.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - ch.sbb.releasetrain:jsfbootadapter 0.0.25 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (j11.2.6.0) +1765 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=2.6.0, <=2.6.5)

org.springframework.boot:spring-boot-starter-web MAVEN version =2.6.0, =4.4.0.2, =1.2.5.release, =0.1.2, =5.7.7, =5.7.7, =5.7.7, =1.0.0, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2022-22965 Source advisory: GHSA-36P3-WJMG-H94X...

io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr2), io.fabric8:process-spring-boot-itests-service-invoicing (1.1.0.cr2) +11 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.1.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing 1.1.0.c...

com.deviceatlas:deviceatlas-spring-mobile-extension (0.1.0), com.github.wnameless.spring:spring-routing-resolver (0.1.0) +46 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.2.7.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.deviceatlas:deviceatlas-spring-mobile-extension 0.1...

com.github.freme-project:freme-parent (0.0.1), com.github.wnameless.spring:spring-paper-trail (0.3.0) +79 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.2.8.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.github.freme-project:freme-parent 0.0.1 -...

com.github.jlgrock.snp:client (0.1), com.github.jlgrock.snp:core (0.1) +46 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.2.0.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.github.jlgrock.snp:client 0.1 -...

com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway (1.5.0.release), com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.0.release) +166 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.16.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.alibaba.cloud:spring-cloud-alibaba-sentinel-gatewa...

cn.patterncat:job-event-store-jdbc (>=0.0.3, <=0.0.4), cn.patterncat:ribbon-meta-filter (>=0.0.1, <=0.0.3) +28 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.4.6.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - cn.patterncat:job-event-store-jdbc =0.0.3, =0.0.1,...

com.ebay:lightning-client (0.9.0), com.ebay:lightning-core (0.9.0) +4 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.0.1.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.ebay:lightning-client 0.9.0 - com.ebay:lightning-co...

br.com.ideotech:draw-out-spring-boot-aop (>=1.5.19.release, <=1.5.19-4.release), br.com.ideotech:draw-out-spring-boot-lib (>=1.5.19.release, <=1.5.19-4.release) +70 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.19.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - br.com.ideotech:draw-out-spring-boot-aop...

com.arcadeanalytics:arcadeanalytics (>=1.0.2, <=1.0.8), com.deere.isg.work-tracker.examples:spring-boot-example (>=1.0.0-rc4, <=1.0.0-rc14) +37 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.15.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.arcadeanalytics:arcadeanalytics =1.0.2, =1.0.0-rc4...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +385 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.4.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.0.1, =0.0.1.releas...

com.github.g-chenning:jdbc-yml-quick (0.0.6-release), com.github.g-chenning:jdbc-yml-quick-opensource-wcn (0.0.1.release) +40 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.5.17.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.5.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.github.g-chenning:jdbc-yml-quick 0.0.6-release -...

cc.zenfery:springboot-starter-mds (>=0.1.1, <=0.1.2), cc.zenfery:springboot-starter-mds-sample (>=0.1.1, <=0.1.2) +75 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.4.4.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - cc.zenfery:springboot-starter-mds =0.1.1, =0.1.1, =0.0....

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +10342 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=2.0.0.release, <=2.5.11)

org.springframework.boot:spring-boot-starter-web MAVEN version =2.0.0.release, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =greenwich.sr2.1 and more Source cves: CVE-2022-22965 Source advisory:...