cn.com.xuxiaowei.boot:spring-boot-starter-idempotent (0.0.2-alpha.1), cn.fanzy.minio:easy-minio-spring-boot-starter (>=1.0.0, <=1.0.2) +815 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.1)

org.springframework:spring-web MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.com.xuxiaowei.boot:spring-boot-starter-idempotent 0.0.2-alpha.1 -...

cn.yusiwen:wxpay-spring-boot-example (>=1.0.0.release, <=1.0.1.release), cn.yusiwen:wxpay-spring-boot-starter (>=1.0.0.release, <=1.0.1.release) +84 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.2.20.release)

org.springframework:spring-web MAVEN version 5.2.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.yusiwen:wxpay-spring-boot-example =1.0.0.release, =1.0.0.release, =2.0.0, =2.0.0, =2.0....

com.ahome-it:ahome-tooling-server-core (>=1.1.5-release, <=1.1.9-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.5-release, <=1.1.9-release) +167 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.1.2.release)

org.springframework.security:spring-security-core MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.5-release...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: GHSA-P4MX-P49M-8RW4...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: OSV:GHSA-P4MX-P49M-8RW4...

cc.catalysts.boot:cat-boot-javamelody (>=0.0.4, <=0.2.28), net.bull.javamelody:javamelody-collector-server (>=1.9.3, <=1.60.0) +2 more potentially affected by CVE-2018-12432 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.60.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =0.0.4, =1.9.3, =1.8.1, =1.60.0 Source cves: CVE-2018-12432 Source advisory: OSV:GHSA-G66Q-GRXC-64J3...

com.alibaba.p3c.idea:p3c-common (1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0, <=1.3.6) +65 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (>=5.2.0, <=5.8.1)

net.sourceforge.pmd:pmd-core MAVEN version =5.2.0, =1.0.0, =0.1.0, =0.1.0, =2.14.1, =0.1.0, =1.7.2, =1.4.2, =1.0.0, =1.2.1, =1.2.1, =1.0.0, =1.0.1 and more Source cves: CVE-2019-7722 Source advisory: GHSA-57QJ-79GH-69W8...

com.alibaba.p3c.idea:p3c-common (1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0, <=1.3.6) +30 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (5.5.2)

net.sourceforge.pmd:pmd-core MAVEN version 5.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.alibaba.p3c.idea:p3c-common 1.0.0 - com.alibaba.p3c:p3c-pmd =1.0.0, =0.0.1, =0.0.7 -...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2017-12972 via com.nimbusds:nimbus-jose-jwt (3.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...

com.atlassian.connect:atlassian-connect-spring-boot-core (>=0.9.0-alpha, <=1.3.6), com.atlassian.connect:atlassian-connect-spring-boot-jwt (>=0.9.0-alpha, <=1.3.6) +3 more potentially affected by CVE-2017-12974 via com.nimbusds:nimbus-jose-jwt (3.6)

com.nimbusds:nimbus-jose-jwt MAVEN version 3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.atlassian.connect:atlassian-connect-spring-boot-core =0.9.0-alpha, =0.9.0-alpha, =0.9.0-alpha,...

io.undertow:undertow-servlet (1.1.9.final), io.undertow:undertow-websockets-jsr (1.1.9.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.1.9.final)

io.undertow:undertow-core MAVEN version 1.1.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.9.final - io.undertow:undertow-websockets-jsr 1.1.9.final -...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

io.undertow:undertow-servlet (1.3.26.final), io.undertow:undertow-websockets-jsr (1.3.26.final) +9 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.26.final)

io.undertow:undertow-core MAVEN version 1.3.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.26.final - io.undertow:undertow-websockets-jsr 1.3.26.final -...

io.undertow:undertow-servlet (1.1.7.final), io.undertow:undertow-websockets-jsr (1.1.7.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.1.7.final)

io.undertow:undertow-core MAVEN version 1.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.7.final - io.undertow:undertow-websockets-jsr 1.1.7.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2018-14642 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.4) +134 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.2.4.release)

org.springframework:spring-messaging MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.4 -...

io.oasp.java.modules:oasp4j-batch (>=1.5.0, <=2.6.1), org.springframework.batch:spring-batch-integration (>=3.0.0.release, <=3.0.8.release) +29 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.5.release)

org.springframework:spring-messaging MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - io.oasp.java.modules:oasp4j-batch =1.5.0, =3.0.0.release, =1.1.0.release,...

org.springframework.batch:spring-batch-integration (3.0.9.release), org.springframework.boot:spring-boot-starter-integration (>=1.1.11.release, <=1.1.12.release) +27 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (4.0.9.release)

org.springframework:spring-messaging MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-messaging and may be impacted: - org.springframework.batch:spring-batch-integration 3.0.9.release -...

com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20) +147 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (4.3.29.release)

org.springframework:spring-beans MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-beans and may be impacted: - com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate =2.3.12,...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dev-tools:ai-devtools (>=0.1.12, <=0.1.20) +26830 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (>=5.0.0.release, <=5.2.21.release)

org.springframework:spring-beans MAVEN version =5.0.0.release, =4.4.0.0, =0.1.12, =0.2, =0.2, =0.2, =0.2, =0.2, =0.2, =0.5, =0.0.12, =0.0.12, =0.1.2, =0.0.22, =0.0.22, =0.0.51 and more Source cves: CVE-2022-22970 Source advisory: OSV:GHSA-HH26-6XWR-GGV7...