ch.nexsol-tech.gateway:sample-gateway (>=1.2.0, <=1.3.1), ch.nexsol-tech.gateway:spring-cloud-gateway-database (>=1.2.0, <=1.3.1) +13 more potentially affected by CVE-2025-41243 via org.springframework.cloud:spring-cloud-gateway-server-webflux (4.3.0)

org.springframework.cloud:spring-cloud-gateway-server-webflux MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-gateway-server-webflux and may be impacted: - ch.nexsol-tech.gateway:sample-gateway...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (>=0.2.0, <=0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +29863 more potentially affected by CVE-2025-41249 via org.springframework:spring-core (>=6.0.0, <=6.2.10)

org.springframework:spring-core MAVEN version =6.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.12.1 and more Source cves: CVE-2025-41249 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-12817817...

com.alilitech:boot-plus-generator (>=1.1.0, <=1.3.7), com.alilitech:boot-plus-log (>=1.2.0, <=2.0.5) +35 more potentially affected by CVE-2025-58754 via org.webjars.npm:axios (>=0.5.4, <=0.26.0)

org.webjars.npm:axios MAVEN version =0.5.4, =1.1.0, =1.2.0, =1.1.0, =1.0.0, =1.0.1, =1.6.1, =1.1.71, =1.1.521 - org.webjars.npm:googlemapsgoogle-maps-services-js 3.1.13 - org.webjars.npm:grot-table 1.6.1 and more Source cves: CVE-2025-58754 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-12613774...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release) potentially affected by CVE-2025-7787 via com.xuxueli:xxl-job-core (1.8.2)

com.xuxueli:xxl-job-core MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release Source cves: CVE-2025-7787 Source advisory:...

com.budwk.nb:budwk-nutzboot-starter-xxl-job (6.1.0), com.github.kancyframework:delay-message-scheduler (0.0.1-release) +2 more potentially affected by CVE-2025-7787 via com.xuxueli:xxl-job-core (2.1.2)

com.xuxueli:xxl-job-core MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - com.budwk.nb:budwk-nutzboot-starter-xxl-job 6.1.0 - com.github.kancyframework:delay-message-scheduler...

cn.centychen:xxl-job-spring-boot-starter (>=1.0.0-release, <=1.0.1-release), cn.db101:xxl-job-spring-boot-starter (1.1.0) potentially affected by CVE-2025-7787 via com.xuxueli:xxl-job-core (2.0.2)

com.xuxueli:xxl-job-core MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.centychen:xxl-job-spring-boot-starter =1.0.0-release, =1.0.1-release - cn.db101:xxl-job-spring-boot-starter...

com.roncoo:roncoo-spring-boot-starter-xxl-job (>=1.0.7, <=1.0.8), com.wueasy:wueasy-task-xxl-job (3.1.0) potentially affected by CVE-2025-7787 via com.xuxueli:xxl-job-core (2.1.1)

com.xuxueli:xxl-job-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - com.roncoo:roncoo-spring-boot-starter-xxl-job =1.0.7, =1.0.8 - com.wueasy:wueasy-task-xxl-job 3.1.0 Source cves...

com.battcn.boot:extend-xxl-job-spring-boot-starter (>=2.1.1-release, <=2.1.2-release), com.lingdonge:cloud-xxl-job (3.0.5) +1 more potentially affected by CVE-2025-7787 via com.xuxueli:xxl-job-core (2.1.0)

com.xuxueli:xxl-job-core MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - com.battcn.boot:extend-xxl-job-spring-boot-starter =2.1.1-release, =3.0.0, =3.0.1 Source cves: CVE-2025-7787...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=2.1.8, <=2.2.1), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=2.1.8, <=2.2.1) +131 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (8.20.2)

com.nimbusds:nimbus-jose-jwt MAVEN version 8.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =2.1.8, =2.1.8, =2.1.8, =3.4.0, =3.3.0,...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (3.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...

org.infinispan:infinispan-server-runtime (12.0.0.final), org.infinispan:infinispan-server-testdriver-core (12.0.0.final) +4 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (12.0.0.final)

org.infinispan:infinispan-cli-client MAVEN version 12.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 12.0.0.final -...

org.infinispan:infinispan-server-runtime (12.1.0.cr2), org.infinispan:infinispan-server-testdriver-core (12.1.0.cr2) +4 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (12.1.0.cr2)

org.infinispan:infinispan-cli-client MAVEN version 12.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 12.1.0.cr2 -...

ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.114.0, <=0.120.0), ai.ancf.lmos:arc-runner (>=0.114.0, <=0.120.0) +6874 more potentially affected by CVE-2025-41234 via org.springframework:spring-web (>=6.2.0, <=6.2.7)

org.springframework:spring-web MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.17.0, =1.23.0 and more Source cves: CVE-2025-41234 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-10345766...

com.hccake:ballcat-extend-kafka (>=0.8.0, <=1.4.3), com.hccake:ballcat-spring-boot-starter-kafka (>=0.8.0, <=1.4.3) potentially affected by CVE-2025-27819 via org.apache.kafka:kafka_2.12 (2.6.3)

org.apache.kafka:kafka2.12 MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kafka:kafka2.12 and may be impacted: - com.hccake:ballcat-extend-kafka =0.8.0, =0.8.0, =1.4.3 Source cves: CVE-2025-27819 Source advisory:...

com.canoo.dolphin-platform:dolphin-platform-server-spring (>=0.6.1, <=0.8.6), com.canoo.dolphin-platform:dolphin-platform-spring-controller-tester (0.8.6) +183 more potentially affected by CVE-2025-22235 via org.springframework.boot:spring-boot (1.2.2.release)

org.springframework.boot:spring-boot MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-server-spring =0.6.1, =0.6.1, =0.1,...