org.bonitasoft.engine:bonita-engine-spring-boot-starter (9.0.0), org.bonitasoft.engine:bonita-engine-standalone (9.0.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (9.0.0)

org.bonitasoft.engine:bonita-server MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 9.0.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (>=10.0.0, <=10.1.0)

org.bonitasoft.engine:bonita-server MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-28087 Source advisory: OSV:GHSA-76V2-48W6-CRXR...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.1), org.bonitasoft.engine:bonita-engine-standalone (7.11.1) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.1)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (>=10.0.0, <=10.1.0)

org.bonitasoft.engine:bonita-server MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-28087 Source advisory: GHSA-76V2-48W6-CRXR...

org.bonitasoft.connectors:bonita-connector-rest (>=1.4.0, <=1.5.1), org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.14.0) +1 more potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.14.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.connectors:bonita-connector-rest =1.4.0, =1.5.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.15.0), org.bonitasoft.engine:bonita-engine-standalone (7.15.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.15.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.15.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.1), org.bonitasoft.engine:bonita-engine-standalone (7.10.1) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.10.1)

org.bonitasoft.engine:bonita-server MAVEN version 7.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.4), org.bonitasoft.engine:bonita-engine-standalone (7.11.4) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.4)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.4 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.0), org.bonitasoft.engine:bonita-engine-standalone (7.11.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.3), org.bonitasoft.engine:bonita-engine-standalone (7.11.3) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.3)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (8.0.0), org.bonitasoft.engine:bonita-engine-standalone (8.0.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (8.0.0)

org.bonitasoft.engine:bonita-server MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 8.0.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.2), org.bonitasoft.engine:bonita-engine-standalone (7.11.2) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.2)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.2 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.13.0), org.bonitasoft.engine:bonita-engine-standalone (7.13.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.13.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.13.0 -...

app.cash.lilbitcoinj:lilbitcoinj-core (>=0.0.2, <=0.0.3), app.cash.lninvoice:ln-invoice (>=0.0.1, <=0.0.6) +1351 more potentially affected by CVE-2024-34447 via org.bouncycastle:bcprov-jdk15to18 (>=1.63, <=1.77)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =1.0.0.release, =1.0.20.release - cn.hermesdi:api-crypto-spring-boot-starter 1.0.0.release and more Source cves: CVE-2024-34447 Source advisory:...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release) potentially affected by CVE-2024-3366 via com.xuxueli:xxl-job-core (1.8.2)

com.xuxueli:xxl-job-core MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release Source cves: CVE-2024-3366 Source advisory:...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.12.1), org.bonitasoft.engine:bonita-engine-standalone (7.12.1) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.12.1)

org.bonitasoft.platform:platform-resources MAVEN version 7.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.12.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.3), org.bonitasoft.engine:bonita-engine-standalone (7.9.3) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.9.3)

org.bonitasoft.platform:platform-resources MAVEN version 7.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.3), org.bonitasoft.engine:bonita-engine-standalone (7.11.3) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.11.3)

org.bonitasoft.platform:platform-resources MAVEN version 7.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (>=10.0.0, <=10.1.0)

org.bonitasoft.platform:platform-resources MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-27609 Source advisory: OSV:GHSA-8VJ9-5V5Q-FHCH...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (>=10.0.0, <=10.1.0)

org.bonitasoft.platform:platform-resources MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-27609 Source advisory: GHSA-8VJ9-5V5Q-FHCH...