net.gplatform:sudoor-server-lib (>=1.0.4, <=1.0.12), org.springframework.boot:spring-boot-starter-social-twitter (>=1.1.0.release, <=1.1.5.release) +1 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (3.2.4.release)

org.springframework.security:spring-security-crypto MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - net.gplatform:sudoor-server-lib =1.0.4,...

com.ahome-it:ahome-tooling-server-core (>=1.0.109-release, <=1.0.121-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.109-release, <=1.0.121-release) +7 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (4.0.2.release)

org.springframework.security:spring-security-crypto MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - com.ahome-it:ahome-tooling-server-core...

io.pebbletemplates:pebble-spring-boot-starter (2.5.1), io.pebbletemplates:pebble-spring3 (2.5.1) +1 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.5.1)

io.pebbletemplates:pebble MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-starter 2.5.1 - io.pebbletemplates:pebble-spring3 2.5.1 -...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.0), io.pebbletemplates:pebble-spring-boot-starter (2.6.0) +8 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.6.0)

io.pebbletemplates:pebble MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.0 - io.pebbletemplates:pebble-spring-boot-starter 2.6.0 -...

com.kurzdigital:keycloak-admin-wrapper (>=0.9.11, <=0.10.3), com.pleosoft:pleosoft-spring-boot-starter (1.0.5-release) +105 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (4.8.3.final)

org.keycloak:keycloak-core MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.kurzdigital:keycloak-admin-wrapper =0.9.11, =1.1.0, =1.2.2, =1.2.2, =7.1.0.m5, =7.1.0.m5,...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (4.0.0), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (4.0.0) +270 more potentially affected by CVE-2024-53299 via org.apache.wicket:wicket-core (>=10.0.0, <=10.2.0)

org.apache.wicket:wicket-core MAVEN version =10.0.0, =1.0.0, =4.0.3, =4.0.4, =7.0.3, =7.0.3, =7.0.3, =7.0.3, =0.2, =0.6.5 and more Source cves: CVE-2024-53299 Source advisory: OSV:GHSA-9CXR-76PM-J3WF...

ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +19897 more potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (>=1.4.0, <=1.5.12)

ch.qos.logback:logback-core MAVEN version =1.4.0, =0.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.9.0 - ai.chat2db.excel:easyexcel-plus-test 0.0.1 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 -...

com.kakawait:cas-security-dynamic-service-resolver (>=0.1.0, <=0.4.0), com.kakawait:cas-security-spring-boot-autoconfigure (>=0.1.0, <=0.3.2) +9 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-cas (>=4.2.2.release, <=4.2.14.release)

org.springframework.security:spring-security-cas MAVEN version =4.2.2.release, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =9.4.0.10, =2.3.0, =2.3.0, =5.20.2, =5.21.1, =5.22.7 Source cves: CVE-2024-38827 Source advisory: MEND:CVE-2024-38827...

com.lt-peacock:webdbviewer (>=1.0.0, <=1.0.2), ee.telekom.workflow:workflow-web (>=1.5.0, <=1.6.3) +5 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-taglibs (>=5.7.1, <=5.7.13)

org.springframework.security:spring-security-taglibs MAVEN version =5.7.1, =1.0.0, =1.5.0, =4.7.0, =4.7.0, =5.2.7, =5.7.2.release, =5.7.2.release, =5.7.4.release Source cves: CVE-2024-38827 Source advisory: MEND:CVE-2024-38827...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2023-4639 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2016-1000273 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2016-1000273 Source advisory: MEND:CVE-2016-1000273...