org.springframework.ai:spring-ai-mariadb-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6), org.springframework.ai:spring-ai-starter-vector-store-mariadb (>=1.0.0-m7, <=1.0.3) potentially affected by CVE-2026-22730 via org.springframework.ai:spring-ai-mariadb-store (>=1.0.0-m5, <=1.0.3)

org.springframework.ai:spring-ai-mariadb-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.3 Source cves: CVE-2026-22730 Source advisory: GHSA-C267-RFVC-MVPM...

org.springframework.ai:spring-ai-mariadb-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6), org.springframework.ai:spring-ai-starter-vector-store-mariadb (>=1.0.0-m7, <=1.0.3) potentially affected by CVE-2026-22730 via org.springframework.ai:spring-ai-mariadb-store (>=1.0.0-m5, <=1.0.3)

org.springframework.ai:spring-ai-mariadb-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.3 Source cves: CVE-2026-22730 Source advisory: OSV:GHSA-C267-RFVC-MVPM...

org.springframework.ai:spring-ai-mariadb-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6), org.springframework.ai:spring-ai-starter-vector-store-mariadb (>=1.0.0-m7, <=1.0.3) potentially affected by CVE-2026-22730 via org.springframework.ai:spring-ai-mariadb-store (>=1.0.0-m5, <=1.0.3)

org.springframework.ai:spring-ai-mariadb-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.3 Source cves: CVE-2026-22730 Source advisory: MEND:CVE-2026-22730...

org.springframework.ai:spring-ai-mariadb-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6), org.springframework.ai:spring-ai-starter-vector-store-mariadb (>=1.0.0-m7, <=1.0.3) potentially affected by CVE-2026-22730 via org.springframework.ai:spring-ai-mariadb-store (>=1.0.0-m5, <=1.0.3)

org.springframework.ai:spring-ai-mariadb-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.3 Source cves: CVE-2026-22730 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-15679672...

com.vaadin:flow (1.0.23), com.vaadin:flow-client (1.0.23) +11 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.0.23)

com.vaadin:flow-server MAVEN version 1.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 1.0.23 - com.vaadin:flow-client 1.0.23 - com.vaadin:flow-data 1.0.23 -...

cn.herodotus.dante:dante-message-servlet-websocket (>=4.0.0.0-m2, <=4.0.0.0-m3), cn.herodotus.dante:servlet-message-spring-boot-starter (>=4.0.0.0-m2, <=4.0.0.0-m3) +800 more potentially affected by CVE-2025-11143 via org.eclipse.jetty:jetty-http (>=12.1.0, <=12.1.4)

org.eclipse.jetty:jetty-http MAVEN version =12.1.0, =4.0.0.0-m2, =4.0.0.0-m2, =7.0.0-m2, =9.0.0, =9.1.0, =9.0.0, =9.1.0, =2.24.0, =21.3.3, =0.2.1-alpha, =0.2.1-alpha, =4.0.0-1215, =4.0.0-1215, =2.4.2, =2.4.5 - com.github.cafaudit:caf-audit-service-container 5.0.5-1360 and more Source cves:...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.baomidou:shaun-core (2.0.0) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.3, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.3, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: SNYK:JAVA-ORGPAC4J-15428218...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.github.hiwepy:pac4j-spring-boot-starter (3.3.x.20241020.release) +2 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.5, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.5, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: GHSA-PM7G-W2CF-Q238...

com.baomidou:shaun-core (>=1.0, <=1.4), com.baomidou:shaun-spring-boot-starter (>=1.0, <=1.4) +37 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=4.0.0-rc1, <=4.5.8)

org.pac4j:pac4j-jwt MAVEN version =4.0.0-rc1, =1.0, =1.0, =1.1, =1.1.0, =1.1.1, =1.1.1, =1.1.1, =1.0.0.release, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.9.0 and more Source cves: CVE-2026-29000 Source advisory: GHSA-PM7G-W2CF-Q238...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.baomidou:shaun-core (2.0.0) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.3, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.3, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: MEND:CVE-2026-29000...

com.diboot:diboot-file-spring-boot-starter (2.6.0), com.diboot:diboot-iam-spring-boot-starter (2.6.0) +155 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.9.0)

org.apache.shiro:shiro-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.diboot:diboot-file-spring-boot-starter 2.6.0 - com.diboot:diboot-iam-spring-boot-starter 2.6.0 -...

com.github.hiwepy:shiro-biz (>=1.1.0.release, <=1.1.2.release), com.github.hiwepy:shiro-csrfguard-spring-boot-starter (>=1.0.0.release, <=1.0.1.release) +41 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.5.0)

org.apache.shiro:shiro-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.github.hiwepy:shiro-biz =1.1.0.release, =1.0.0.release, =1.0.0, =1.0.0, =1.3.1, =1.0.0, =1.4.0 -...

com.github.taccisum:shiro-starter (>=2.0, <=2.3.0), com.pramyness:shiro-redis-spring-boot-starter (>=2.2.8, <=2.2.10) +14 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.4.0-rc2)

org.apache.shiro:shiro-spring MAVEN version 1.4.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.github.taccisum:shiro-starter =2.0, =2.2.8, =2.2.10 -...

com.diboot:diboot-file-spring-boot-starter (2.6.0), com.diboot:diboot-iam-spring-boot-starter (2.6.0) +77 more potentially affected by CVE-2026-23903 via org.apache.shiro:shiro-spring (1.9.0)

org.apache.shiro:shiro-spring MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-spring and may be impacted: - com.diboot:diboot-file-spring-boot-starter 2.6.0 - com.diboot:diboot-iam-spring-boot-starter 2.6.0 -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

com.almis.awe:awe-annotation (>=4.10.11, <=4.11.2), com.almis.awe:awe-annotations-spring-boot-starter (>=4.10.11, <=4.11.2) +152 more potentially affected by CVE-2025-22234 via org.springframework.security:spring-security-crypto (6.3.8)

org.springframework.security:spring-security-crypto MAVEN version 6.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - com.almis.awe:awe-annotation =4.10.11, =4.10.11, =4.10.11...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +4128 more potentially affected by CVE-2025-70974 via com.alibaba:fastjson (>=1.1.15, <=1.2.47)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.3.0, =3.0.0, =1.0.0, =1.0.1, =1.0.2 and more Source cves: CVE-2025-70974 Source advisory: OSV:GHSA-JM7W-5684-PVH8...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +4128 more potentially affected by CVE-2025-70974 via com.alibaba:fastjson (>=1.1.15, <=1.2.47)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.3.0, =3.0.0, =1.0.0, =1.0.1, =1.0.2 and more Source cves: CVE-2025-70974 Source advisory: MEND:CVE-2025-70974...