com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1), de.codecentric:spring-boot-admin-sample (>=1.1.0, <=1.1.1) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.9.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.bushidowallet:bushido-wallet-service =1.0.0, =1.1.0,...

org.springframework.boot:spring-boot-docs (1.1.10.release), org.springframework.boot:spring-boot-starter-actuator (1.1.10.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.10.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.10.release -...

cn.patterncat:event-trace-client (1.3.0), cn.patterncat:springboot-metrics-starter (>=0.0.1, <=0.0.8) +9 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.6.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.patterncat:event-trace-client 1.3.0 -...

com.stormpath.spring:stormpath-sdk-examples-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1), com.stormpath.spring:stormpath-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1) +4 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

org.springframework.boot:spring-boot-docs (1.1.11.release), org.springframework.boot:spring-boot-starter-actuator (1.1.11.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.11.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.11.release -...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: OSV:GHSA-3J2F-58RQ-G6P7...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: GHSA-3J2F-58RQ-G6P7...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: MEND:CVE-2023-31581...

com.gitee.pulanos.pangu:pangu-gateway-spring-boot-starter (>=5.0.7, <=5.1.0), io.github.shuigedeng:taotao-cloud-starter-actuator (2023.08) +330 more potentially affected by CVE-2023-25753 via org.apache.shenyu:shenyu-common (>=2.4.0, <=2.5.1)

org.apache.shenyu:shenyu-common MAVEN version =2.4.0, =5.0.7, =2022.09, =2023.2.01, =2022.11, =2022.11, =2022.11, =2022.09, =2023.02, =2022.11, =2022.11, =2023.04, =2022.11, =2022.11, =2022.09, =2022.10 and more Source cves: CVE-2023-25753 Source ad...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.github.jmjlbmn:huiche-demo (>=1.0.1, <=1.0.5), com.github.jmjlbmn:huiche-spring-boot-starter (>=1.0.1, <=1.0.6) +124 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.4.22.final)

io.undertow:undertow-core MAVEN version 1.4.22.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.jmjlbmn:huiche-demo =1.0.1, =1.0.1, =1.0.1.release, =0.5.0, =1.5.8, =1.3.1, =4.10.0-beta2,...

com.fitbur.testify.examples:example-junit-springboot-systemtest (>=0.1.0, <=0.1.3), com.github.almex:raildelays-assembly-descriptor (>=2.0.0-beta.1, <=2.0.0-beta.2) +5 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (1.3.14.final)

io.undertow:undertow-core MAVEN version 1.3.14.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fitbur.testify.examples:example-junit-springboot-systemtest =0.1.0, =2.0.0-beta.1, =2.0.0-beta.1,...

cn.hutool:hutool-dfa (4.0.9), cn.hutool:hutool-http (4.0.9) +2 more potentially affected by CVE-2023-42276 via cn.hutool:hutool-json (4.0.9)

cn.hutool:hutool-json MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.9 - cn.hutool:hutool-http 4.0.9 - cn.virens:virens-util =1.0.7, =1.1.1 -...

cn.hutool:hutool-dfa (4.0.9), cn.hutool:hutool-http (4.0.9) +2 more potentially affected by CVE-2023-42277 via cn.hutool:hutool-json (4.0.9)

cn.hutool:hutool-json MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.9 - cn.hutool:hutool-http 4.0.9 - cn.virens:virens-util =1.0.7, =1.1.1 -...

cn.hutool:hutool-dfa (4.0.9), cn.hutool:hutool-http (4.0.9) +2 more potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.0.9)

cn.hutool:hutool-json MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.9 - cn.hutool:hutool-http 4.0.9 - cn.virens:virens-util =1.0.7, =1.1.1 -...

com.github.vindell:spring-boot-starter-pf4j2 (>=1.0.0.release, <=1.0.1.release), org.pf4j:pf4j-update (>=2.0.0, <=2.1.0) potentially affected by CVE-2023-40826 via org.pf4j:pf4j (2.2.0)

org.pf4j:pf4j MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pf4j:pf4j and may be impacted: - com.github.vindell:spring-boot-starter-pf4j2 =1.0.0.release, =2.0.0, =2.1.0 Source cves: CVE-2023-40826 Source advisory:...

com.bitplan.dragtop:com.bitplan.dragtop (>=0.0.1, <=0.0.2), com.bitplan.pdfextractor:com.bitplan.pdfextractor (0.0.1) +4 more potentially affected by CVE-2023-40828 via org.pf4j:pf4j (2.4.0)

org.pf4j:pf4j MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pf4j:pf4j and may be impacted: - com.bitplan.dragtop:com.bitplan.dragtop =0.0.1, =5.0.0, =5.0.0, =1.0.2.release, =1.0.6.release Source cves: CVE-2023-40828 Source...

com.github.vindell:spring-boot-starter-pf4j2 (>=1.0.0.release, <=1.0.1.release), org.pf4j:pf4j-update (>=2.0.0, <=2.1.0) potentially affected by CVE-2023-40828 via org.pf4j:pf4j (2.2.0)

org.pf4j:pf4j MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pf4j:pf4j and may be impacted: - com.github.vindell:spring-boot-starter-pf4j2 =1.0.0.release, =2.0.0, =2.1.0 Source cves: CVE-2023-40828 Source advisory:...