org.bonitasoft.engine:bonita-engine-spring-boot-starter (>=10.0.0, <=10.1.0), org.bonitasoft.engine:bonita-engine-standalone (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (>=10.0.0, <=10.1.0)

org.bonitasoft.platform:platform-resources MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2024-27609 Source advisory: GHSA-8VJ9-5V5Q-FHCH...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.1), org.bonitasoft.engine:bonita-engine-standalone (7.10.1) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.10.1)

org.bonitasoft.platform:platform-resources MAVEN version 7.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (8.0.0), org.bonitasoft.engine:bonita-engine-standalone (8.0.0) +2 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (8.0.0)

org.bonitasoft.platform:platform-resources MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 8.0.0 -...

org.bonitasoft.connectors:bonita-connector-rest (>=1.4.0, <=1.5.1), org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.14.0) +3 more potentially affected by CVE-2024-27609 via org.bonitasoft.platform:platform-resources (7.14.0)

org.bonitasoft.platform:platform-resources MAVEN version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.platform:platform-resources and may be impacted: - org.bonitasoft.connectors:bonita-connector-rest =1.4.0, =1.5.1 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.3, <=1.0.4), com.hazelcast:hazelcast-build-utils (3.6.7) +11 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.6.7)

com.hazelcast:hazelcast MAVEN version 3.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.3, =1.4.5, =1.4.6 Source cves:...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2024-1635 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2024-1635 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2024-1635 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2024-1635 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2024-1635 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (2.1.10), com.gitee.kamismile:api (>=0.0.3, <=0.0.9) +44 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.12.11)

com.hazelcast:hazelcast MAVEN version 3.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter 2.1.10 - com.gitee.kamismile:api =0.0.3,...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

cn.itlym:shoulder-starter-auth-server (0.6), cn.itlym:shoulder-starter-auth-token (0.6) +22 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (8.21)

com.nimbusds:nimbus-jose-jwt MAVEN version 8.21 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - cn.itlym:shoulder-starter-auth-server 0.6 - cn.itlym:shoulder-starter-auth-token 0.6 -...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (3.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...

com.github.springbootplus:spring-boot-starter-allinone (2.0.1.release), com.malliina:mobile-push_2.12 (>=1.12.2, <=1.12.4) +7 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (5.9)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.springbootplus:spring-boot-starter-allinone 2.0.1.release - com.malliina:mobile-push2.12...

com.erudika:para-jar (>=1.30.0, <=1.30.2), com.erudika:para-server (>=1.29.2, <=1.30.2) +241 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (5.10)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-jar =1.30.0, =1.29.2, =1.29.2, =0.0.8, =0.0.9, =5.0.4.release1, =5.3.1, =5.3.1, =5.3.1,...

eu.fraho.spring:security-jwt-base (>=0.5.2, <=2.0.1), eu.fraho.spring:security-jwt-base-spring-boot-starter (>=1.0.0, <=2.0.1) +6 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (4.41.3)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.41.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - eu.fraho.spring:security-jwt-base =0.5.2, =1.0.0, =0.7.0, =1.0.0, =0.5.2, =1.0.0, =0.5.2, =1.0.0, =2.0...