io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

de.adorsys.oauth:oauth-wildfly-support (>=0.12, <=0.35), io.undertow:undertow-servlet (1.1.8.final) +4 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.1.8.final)

io.undertow:undertow-core MAVEN version 1.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.adorsys.oauth:oauth-wildfly-support =0.12, =7.12.0, =1.2.6.release, =1.2.7.release -...

com.github.gmcoringa:coordinator (0.0.1), io.undertow:undertow-servlet (1.1.3.final) +4 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.1.3.final)

io.undertow:undertow-core MAVEN version 1.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.gmcoringa:coordinator 0.0.1 - io.undertow:undertow-servlet 1.1.3.final -...

com.github.tuhe32:seed-spring-boot-starter (>=0.1.2, <=0.1.4) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.4.3)

cn.hutool:hutool-all MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.github.tuhe32:seed-spring-boot-starter =0.1.2, =0.1.4 Source cves: CVE-2023-24163 Source advisory:...

com.github.tuhe32:seed-spring-boot-starter (>=0.1.2, <=0.1.4) potentially affected by CVE-2023-24162 via cn.hutool:hutool-all (4.4.3)

cn.hutool:hutool-all MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.github.tuhe32:seed-spring-boot-starter =0.1.2, =0.1.4 Source cves: CVE-2023-24162 Source advisory:...

cn.jiangzeyin.fast-boot:common-boot (>=1.2.24, <=1.2.27), cn.jiangzeyin.fast-boot:common-redis (>=1.2.24, <=1.2.27) +3 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.4.5)

cn.hutool:hutool-all MAVEN version 4.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.2.24, =1.2.24, =1.0.2-rc.7, =1.0.0, =0.0.1, =1.0.2 Source cves: CVE-2023-24163...

com.bstek.uflo:uflo-console (>=2.0.0, <=2.1.5), com.syyai.spring.boot:uflo-spring-boot-starter (2.1.4) +1 more potentially affected by CVE-2022-25894 via com.bstek.uflo:uflo-core (>=2.0.0, <=2.1.5)

com.bstek.uflo:uflo-core MAVEN version =2.0.0, =2.0.0, =2.0, =2.5.1.v20220215 Source cves: CVE-2022-25894 Source advisory: GHSA-8M9F-C5P9-WQCH...

cn.hutool:hutool-dfa (4.0.9), cn.hutool:hutool-http (4.0.9) +2 more potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (4.0.9)

cn.hutool:hutool-json MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.9 - cn.hutool:hutool-http 4.0.9 - cn.virens:virens-util =1.0.7, =1.1.1 -...

cn.hutool:hutool-dfa (4.0.9), cn.hutool:hutool-http (4.0.9) +2 more potentially affected by CVE-2022-45688 via cn.hutool:hutool-json (4.0.9)

cn.hutool:hutool-json MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.9 - cn.hutool:hutool-http 4.0.9 - cn.virens:virens-util =1.0.7, =1.1.1 -...

cn.hutool:hutool-dfa (4.0.9), cn.hutool:hutool-http (4.0.9) +2 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.0.9)

cn.hutool:hutool-json MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - cn.hutool:hutool-dfa 4.0.9 - cn.hutool:hutool-http 4.0.9 - cn.virens:virens-util =1.0.7, =1.1.1 -...

ai.djl.spring:djl-spring-boot-starter-tensorflow-auto (>=0.15, <=0.18), ai.djl.tensorflow:tensorflow-api (>=0.15.0, <=0.18.0) +7176 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-java (>=3.17.0, <=3.19.5)

com.google.protobuf:protobuf-java MAVEN version =3.17.0, =0.15, =0.15.0, =0.15.0, =0.15.0, =3.32.1.6, =3.32.1.6-1-2.1, =3.32.1.6-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.0.1-alpha, =2.8.4-alpha1, =3.0.1-alpha1 and more Source cves: CVE-2022-35...

ai.api.libai.speech:libai-speech-gcp (>=1.4.6, <=1.6.12), ai.bareun.tagger:bareun (1.4.2) +17744 more potentially affected by CVE-2022-3509 via com.google.protobuf:protobuf-java (>=3.0.0, <=3.16.1)

com.google.protobuf:protobuf-java MAVEN version =3.0.0, =1.4.6, =0.6, =0.6.0, =0.6.0, =0.6.0, =0.11.0, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.4.1 and more Sourc...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release) potentially affected by CVE-2022-43183 via com.xuxueli:xxl-job-core (1.8.2)

com.xuxueli:xxl-job-core MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release Source cves: CVE-2022-43183 Source advisory:...

ai.djl.spring:djl-spring-boot-starter-tensorflow-auto (>=0.15, <=0.18), ai.djl.tensorflow:tensorflow-api (>=0.15.0, <=0.18.0) +7176 more potentially affected by CVE-2022-3510 via com.google.protobuf:protobuf-java (>=3.17.0, <=3.19.5)

com.google.protobuf:protobuf-java MAVEN version =3.17.0, =0.15, =0.15.0, =0.15.0, =0.15.0, =3.32.1.6, =3.32.1.6-1-2.1, =3.32.1.6-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.0.1-alpha, =2.8.4-alpha1, =3.0.1-alpha1 and more Source cves: CVE-2022-35...

io.github.talelin:lin-cms-spring-boot-autoconfigure (>=0.0.1-rc1, <=0.2.0-release), io.github.talelin:lin-cms-spring-boot-starter (>=0.0.1-rc1, <=0.2.0-release) potentially affected by CVE-2022-44244 via io.github.talelin:lin-cms-core (>=0.0.1-rc2, <=0.2.0-release)

io.github.talelin:lin-cms-core MAVEN version =0.0.1-rc2, =0.0.1-rc1, =0.0.1-rc1, =0.2.0-release Source cves: CVE-2022-44244 Source advisory: OSV:GHSA-4VRC-Q7M6-VQ7W...

io.github.talelin:lin-cms-spring-boot-autoconfigure (>=0.0.1-rc1, <=0.2.0-release), io.github.talelin:lin-cms-spring-boot-starter (>=0.0.1-rc1, <=0.2.0-release) potentially affected by CVE-2022-44244 via io.github.talelin:lin-cms-core (>=0.0.1-rc2, <=0.2.0-release)

io.github.talelin:lin-cms-core MAVEN version =0.0.1-rc2, =0.0.1-rc1, =0.0.1-rc1, =0.2.0-release Source cves: CVE-2022-44244 Source advisory: GHSA-4VRC-Q7M6-VQ7W...

cc.uncarbon.framework:helio-starter-dubbo (1.7.0), io.github.duang-labs:duang-starter-discovery-dubbo (>=0.0.1.rc1, <=0.0.1.rc2) +10 more potentially affected by CVE-2022-39198 via org.apache.dubbo:dubbo (3.1.0)

org.apache.dubbo:dubbo MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dubbo:dubbo and may be impacted: - cc.uncarbon.framework:helio-starter-dubbo 1.7.0 - io.github.duang-labs:duang-starter-discovery-dubbo =0.0.1.rc1,...

cc.uncarbon.framework:helio-starter-dubbo (1.7.0), io.github.duang-labs:duang-starter-discovery-dubbo (>=0.0.1.rc1, <=0.0.1.rc2) +10 more potentially affected by CVE-2022-39198 via org.apache.dubbo:dubbo (3.1.0)

org.apache.dubbo:dubbo MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dubbo:dubbo and may be impacted: - cc.uncarbon.framework:helio-starter-dubbo 1.7.0 - io.github.duang-labs:duang-starter-discovery-dubbo =0.0.1.rc1,...

ai.djl.spring:djl-spring-boot-starter-tensorflow-auto (>=0.15, <=0.18), ai.djl.tensorflow:tensorflow-api (>=0.15.0, <=0.18.0) +7176 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-java (>=3.17.0-rc-1, <=3.19.5)

com.google.protobuf:protobuf-java MAVEN version =3.17.0-rc-1, =0.15, =0.15.0, =0.15.0, =0.15.0, =3.32.1.6, =3.32.1.6-1-2.1, =3.32.1.6-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.0.1-alpha, =2.8.4-alpha1, =3.0.1-alpha1 and more Source cves:...

cn.centychen:xxl-job-spring-boot-starter (>=1.0.0-release, <=1.0.1-release), cn.db101:xxl-job-spring-boot-starter (1.1.0) +50 more potentially affected by CVE-2022-40929 via com.xuxueli:xxl-job-core (>=2.0.1, <=2.2.0)

com.xuxueli:xxl-job-core MAVEN version =2.0.1, =1.0.0-release, =0.0.8-release, =0.0.8-release, =1.6.0, =1.0.1, =2.1.1-release, =6.1.0, =0.0.4, =1.5.13, =1.7.1 - com.gitee.zodiacstack:zodiac-xxljob-spring-boot-starter 1.5.16 - com.github.hiwepy:xxljob-spring-boot-starter 1.0.0.release -...