io.undertow:undertow-websockets-jsr (1.3.28.final), org.springframework.boot:spring-boot-starter-undertow (>=1.4.6.release, <=1.4.7.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.3.28.final)

io.undertow:undertow-servlet MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-websockets-jsr (1.1.9.final), org.springframework.boot:spring-boot-starter-undertow (1.2.8.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.9.final)

io.undertow:undertow-servlet MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-websockets-jsr (1.1.7.final), org.springframework.boot:spring-boot-starter-undertow (1.2.5.release) potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.1.7.final)

io.undertow:undertow-servlet MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.1.7.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2019-3888 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2019-3888 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2019-3888 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2019-3888 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

org.apache.camel:camel-spring-batch (>=2.13.0, <=2.13.4), org.springframework.batch:spring-batch-test (2.2.5.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.2.5.release)

org.springframework.batch:spring-batch-core MAVEN version 2.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - org.apache.camel:camel-spring-batch =2.13.0, =1.0.0.release,...

de.codecentric:spring-boot-starter-batch-web (1.0.0.release), org.springframework.batch:spring-batch-test (2.2.6.release) +1 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (2.2.6.release)

org.springframework.batch:spring-batch-core MAVEN version 2.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - de.codecentric:spring-boot-starter-batch-web 1.0.0.release -...

com.microsoft.azure:azure-active-directory-b2c-spring-boot-starter (>=2.1.4.m1, <=2.1.6.m2), com.sap.cloud.security.xsuaa:spring-xsuaa (>=1.1.0.rc1, <=2.1.0) +4 more potentially affected by CVE-2018-15801 via org.springframework.security:spring-security-oauth2-jose (5.1.1.release)

org.springframework.security:spring-security-oauth2-jose MAVEN version 5.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-jose and may be impacted: -...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: MEND:CVE-2018-12432...

cc.autoapi.pucong:auto-flow-core-flow (>=2.0.0, <=2.0.9), cc.autoapi.pucong:auto-flow-persistence (>=2.0.0, <=2.0.9) +179 more potentially affected by CVE-2016-4000 via org.python:jython-standalone (>=2.5.2, <=2.7.1b2)

org.python:jython-standalone MAVEN version =2.5.2, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =1.0.0, =1.3.0, =1.0, =1.0-m1, =1.0-m3, =0.2.13, =0.2.13, =1.0.0, =1.1.0 and more Source cves: CVE-2016-4000 Source advisory: MEND:CVE-2016-4000...