org.smartboot.flow:smart-flow-admin (>=1.0.8, <=1.1.4), org.smartboot.servlet:smart-servlet-maven-plugin (>=0.1.9, <=0.6) +1 more potentially affected by CVE-2021-29425 via org.smartboot.servlet:servlet-core (>=0.1.9, <=0.6)

org.smartboot.servlet:servlet-core MAVEN version =0.1.9, =1.0.8, =0.1.9, =0.1.9, =0.6 Source cves: CVE-2021-29425 Source advisory: OSV:GHSA-GWRP-PVRQ-JMWV...

org.smartboot.flow:smart-flow-admin (>=1.0.8, <=1.1.4), org.smartboot.servlet:smart-servlet-maven-plugin (>=0.1.9, <=0.6) +1 more potentially affected by CVE-2021-29425 via org.smartboot.servlet:servlet-core (>=0.1.9, <=0.6)

org.smartboot.servlet:servlet-core MAVEN version =0.1.9, =1.0.8, =0.1.9, =0.1.9, =0.6 Source cves: CVE-2021-29425 Source advisory: GHSA-GWRP-PVRQ-JMWV...

com.quamto.jira:plugins-base (>=1.1.1-rc, <=1.6.1) potentially affected by CVE-2021-26074 via com.atlassian.connect:atlassian-connect-spring-boot-starter (>=1.2.1, <=1.5.0)

com.atlassian.connect:atlassian-connect-spring-boot-starter MAVEN version =1.2.1, =1.1.1-rc, =1.6.1 Source cves: CVE-2021-26074 Source advisory: MEND:CVE-2021-26074...

com.kurzdigital:keycloak-admin-wrapper (>=0.9.11, <=0.10.3), com.pleosoft:pleosoft-spring-boot-starter (1.0.5-release) +105 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (4.8.3.final)

org.keycloak:keycloak-core MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.kurzdigital:keycloak-admin-wrapper =0.9.11, =1.1.0, =1.2.2, =1.2.2, =7.1.0.m5, =7.1.0.m5,...

cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: MEND:CVE-2020-17523...

cn.centychen:xxl-job-spring-boot-starter (>=1.0.0-release, <=1.0.1-release), cn.db101:xxl-job-spring-boot-starter (1.1.0) +53 more potentially affected by CVE-2020-29204 via com.xuxueli:xxl-job-core (>=1.8.2, <=2.2.0)

com.xuxueli:xxl-job-core MAVEN version =1.8.2, =1.0.0-release, =0.0.8-release, =0.0.8-release, =1.6.0, =1.0.1, =2.1.1-release, =6.1.0, =0.0.4, =1.5.13, =1.7.1 - com.gitee.zodiacstack:zodiac-xxljob-spring-boot-starter 1.5.16 - com.github.hiwepy:xxljob-spring-boot-starter 1.0.0.release -...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=0.0.41) +87 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (>=9.0.0, <=9.1.2)

com.cronutils:cron-utils MAVEN version =9.0.0, =0.0.2, =0.0.21, =0.0.1, =0.1.2, =0.0.1, =1.2.19, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2020-26238 Source advisory: OSV:GHSA-PFJ3-56HM-JWQ5...

org.hswebframework:hsweb-task-cluster (1.0.0-rc), org.hswebframework:hsweb-task-core (1.0.0-rc) +1 more potentially affected by CVE-2020-26238 via com.cronutils:cron-utils (7.0.5)

com.cronutils:cron-utils MAVEN version 7.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - org.hswebframework:hsweb-task-cluster 1.0.0-rc - org.hswebframework:hsweb-task-core 1.0.0-rc -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (3.0.3-rc), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (3.0.3-rc) +270 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (9.0.0-m5)

org.apache.wicket:wicket-core MAVEN version 9.0.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context 3.0.3-rc -...

com.github.pukkaone:odata-elasticsearch2-spring-boot-starter (1.4.0-0), com.github.pukkaone:odata-web-spring-boot-starter (1.4.0-0) +27 more potentially affected by CVE-2019-17554 via org.apache.olingo:odata-server-core (>=4.0.0, <=4.6.0)

org.apache.olingo:odata-server-core MAVEN version =4.0.0, =1.1.0-release, =1.0.0-release, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.2.9 and more Source cves: CVE-2019-17554 Source advisory: MEND:CVE-2019-17554...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (3.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...

com.github.springbootplus:spring-boot-starter-allinone (2.0.1.release), com.malliina:mobile-push_2.12 (>=1.12.2, <=1.12.4) +7 more potentially affected by CVE-2019-17195 via com.nimbusds:nimbus-jose-jwt (5.9)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.springbootplus:spring-boot-starter-allinone 2.0.1.release - com.malliina:mobile-push2.12...

com.baidubce.formula:launcher-spring-boot-starter (>=1.3.2.0, <=2.1.1.1), io.atlasmap:atlasmap-standalone (>=1.39.0, <=1.42.10) +27 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.4.26.final)

io.undertow:undertow-servlet MAVEN version 1.4.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - com.baidubce.formula:launcher-spring-boot-starter =1.3.2.0, =1.39.0, =0.10.0.release,...

io.undertow:undertow-websockets-jsr (1.3.18.final), org.springframework.boot:spring-boot-starter-undertow (1.3.3.release) +1 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.3.18.final)

io.undertow:undertow-servlet MAVEN version 1.3.18.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.3.18.final -...