io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.3.26.final), io.undertow:undertow-websockets-jsr (1.3.26.final) +9 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.26.final)

io.undertow:undertow-core MAVEN version 1.3.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.26.final - io.undertow:undertow-websockets-jsr 1.3.26.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

org.togglz:togglz-console-spring-boot-starter (0.0.1) potentially affected by CVE-2020-28191 via org.togglz:togglz-console (0.0.1)

org.togglz:togglz-console MAVEN version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.togglz:togglz-console and may be impacted: - org.togglz:togglz-console-spring-boot-starter 0.0.1 Source cves: CVE-2020-28191 Source advisory:...

com.axway.ats.distrib:ats-distrib (>=4.0.7, <=4.0.8), com.axway.ats.framework.utilities:ats-azure-utilities (>=4.0.7, <=4.0.8) +187 more potentially affected by CVE-2022-30187 via com.azure:azure-storage-blob (>=12.0.0, <=12.18.0-beta.1)

com.azure:azure-storage-blob MAVEN version =12.0.0, =4.0.7, =4.0.7, =3.0.0-beta.1, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0-beta.1, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =4.0.0-beta.2, =1.0.0-beta.4, =1.13.0 and more Source cves: CVE-2022...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +324 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.3.0.release)

org.springframework.boot:spring-boot MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter =0.1.6,...

org.springframework.boot:spring-boot-actuator (1.1.10.release), org.springframework.boot:spring-boot-autoconfigure (1.1.10.release) +30 more potentially affected by CVE-2022-27772 via org.springframework.boot:spring-boot (1.1.10.release)

org.springframework.boot:spring-boot MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - org.springframework.boot:spring-boot-actuator 1.1.10.release -...

com.lframework:cloud-starter (>=3.1.0, <=4.1.1), com.yomahub:liteflow-rule-nacos (>=2.9.1, <=2.16.3.1) +7 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (1.4.4)

com.alibaba.nacos:nacos-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.lframework:cloud-starter =3.1.0, =2.9.1, =1.0.0-release, =1.0.2, =1.0.1, =1.10.5-m1, =1.10.2-m2...

com.github.hengboy:micro-job-autoconfigure (0.0.3.release), com.github.hengboy:micro-job-registry-nacos (0.0.3.release) +9 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (0.8.2)

com.alibaba.nacos:nacos-client MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.github.hengboy:micro-job-autoconfigure 0.0.3.release -...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.3, <=0.2.3), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.3, <=0.2.3) +63 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (1.1.3)

com.alibaba.nacos:nacos-client MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.3, =0.1.3, =2.7.7, =1.0.0, =1.0.0, =1.0.0,...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0-rc1, <=0.2.1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0-rc1, <=0.2.1) +3 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (0.2.1-rc1)

com.alibaba.nacos:nacos-client MAVEN version 0.2.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.11.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.11.release) +3 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.1.14.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.5.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.5.release) potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

de.bwaldvogel:mongo-java-server-test-common (1.34.0), io.holunda.taskpool:camunda-bpm-taskpool-view-mongo (>=2.0.7, <=2.1.2) +4 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.2.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.bwaldvogel:mongo-java-server-test-common 1.34.0 -...

com.epam.reportportal:commons-bugtracking (>=4.0.0, <=4.0.4), com.sinsz.c:bxfs-mongodb (1.0.1) +10 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking =4.0.0, =1.2, =2.6.0...

de.digitalcollections:iiif-bookshelf-webapp (>=2.3.1, <=2.5.1), io.gumga:gumga-application (>=1.5.23, <=4.0.4) +3 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.10.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.digitalcollections:iiif-bookshelf-webapp =2.3.1, =1.5.23,...

com.antelopesystem.crudframework:crud-framework-mongo-connector (>=0.1.0, <=0.5.0), com.antelopesystem.crudframework:crud-framework-utils (>=0.1.1, <=0.5.0) +4 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.0.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.antelopesystem.crudframework:crud-framework-mongo-connecto...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.16.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.16.release) +3 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (2.1.19.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...