org.apache.dubbo:dubbo-spring-boot-actuator (3.1.5), org.apache.dubbo:dubbo-spring-boot-actuator-compatible (3.1.5) +5 more potentially affected by CVE-2023-46279 via org.apache.dubbo:dubbo (3.1.5)

org.apache.dubbo:dubbo MAVEN version 3.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dubbo:dubbo and may be impacted: - org.apache.dubbo:dubbo-spring-boot-actuator 3.1.5 - org.apache.dubbo:dubbo-spring-boot-actuator-compatible 3.1.5 -...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-50100 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-50100 Source...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-50137 Source...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2023-50100 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2023-50137 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-50101 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-50101 Source...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2023-50102 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2023-50102 Source...

Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.4 release and security update

Red Hat Integration Camel for Spring Boot 3.20.4 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.2 release security update

Red Hat Integration Camel for Spring Boot 4.0.2 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

cloud.opencode.base:opencode-base-token (1.0.0), io.github.junxworks:junx-ep-auth (>=2.0.0, <=2.1.0) +11 more potentially affected by CVE-2023-46750 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.0.0-alpha-3)

org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-3 Source cves: CVE-2023-46750 Source advisory: OSV:GHSA-HHW5-C326-822H...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.3.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.3.0)

com.sap.cloud.security:spring-security MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.3.0 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (>=2.10.2, <=2.16.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (>=2.10.2, <=2.16.0)

com.sap.cloud.security:spring-security MAVEN version =2.10.2, =2.10.2, =2.16.0 Source cves: CVE-2023-50422, CVE-2023-50424 Source advisory: OSV:GHSA-59C9-PXQ8-9C73...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.0)

com.sap.cloud.security:spring-security MAVEN version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.0 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.3) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.3)

com.sap.cloud.security:spring-security MAVEN version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.3 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.5) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.5)

com.sap.cloud.security:spring-security MAVEN version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.5 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.3.1) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.3.1)

com.sap.cloud.security:spring-security MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.3.1 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (>=2.10.2, <=2.16.0) potentially affected by CVE-2023-50422 via com.sap.cloud.security:spring-security (>=2.10.2, <=2.16.0)

com.sap.cloud.security:spring-security MAVEN version =2.10.2, =2.10.2, =2.16.0 Source cves: CVE-2023-50422 Source advisory: GHSA-59C9-PXQ8-9C73...

com.sap.cloud.security.xsuaa:spring-xsuaa-mock (1.6.0), com.sap.cloud.security.xsuaa:xsuaa-spring-boot-starter (1.6.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security.xsuaa:spring-xsuaa (1.6.0)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security.xsuaa:spring-xsuaa and may be impacted: - com.sap.cloud.security.xsuaa:spring-xsuaa-mock 1.6.0 -...

com.sap.cloud.security.xsuaa:spring-xsuaa-mock (1.7.0), com.sap.cloud.security.xsuaa:xsuaa-spring-boot-starter (1.7.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security.xsuaa:spring-xsuaa (1.7.0)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security.xsuaa:spring-xsuaa and may be impacted: - com.sap.cloud.security.xsuaa:spring-xsuaa-mock 1.7.0 -...

com.sap.cds:cds-starter-cloudfoundry (>=2.0.1, <=2.4.0), com.sap.cds:cds-starter-k8s (>=2.0.1, <=2.4.0) +2 more potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security.xsuaa:spring-xsuaa (>=3.0.0, <=3.2.1)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version =3.0.0, =2.0.1, =2.0.1, =3.0.0, =3.0.0, =3.2.1 Source cves: CVE-2023-50422, CVE-2023-50424 Source advisory: OSV:GHSA-59C9-PXQ8-9C73...