ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.coherentlogic.coherent.data-model:data-model-core (>=1.0.13-release, <=1.0.14-release) +90 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.0.1.release)

org.springframework:spring-context MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =1.0.13-release, =1.0.13-release,...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release), com.alibaba.csb.sdk:java (1.1.5.11) +142 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.18.release)

org.springframework:spring-context MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release - com.alibaba.csb.sdk:java...

ar.com.onready:spring-resttemplate-logger (1.0.2), br.com.ledgertec:rap-conector-client (>=0.9.0-1, <=1.0.0) +252 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.0.0.release)

org.springframework:spring-context MAVEN version 4.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ar.com.onready:spring-resttemplate-logger 1.0.2 -...

com.dtflys.forest:forest-spring (1.0.0), com.garethahealy.amq6-dual-jaas-plugin:amq6-dual-jaas-plugin-parent (>=1.2.0-beta2, <=1.4.0) +558 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.16.release)

org.springframework:spring-context MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.dtflys.forest:forest-spring 1.0.0 -...

at.chrl:chrl-jms (1.1.0), at.chrl:chrl-orm-spring-integration (1.1.0) +387 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.2.1.release)

org.springframework:spring-context MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.chrl:chrl-jms 1.1.0 - at.chrl:chrl-orm-spring-integration 1.1.0 -...

ai.minxiao:ds4s-cdl4j_2.11 (>=0.1.0, <=0.1.2), ba.jamax.util:jamax-rest (>=1.3.1-release, <=1.3.4-release) +1229 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.6.release)

org.springframework:spring-context MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ai.minxiao:ds4s-cdl4j2.11 =0.1.0, =1.3.1-release, =2.2.0, =2.4.0, =2.2.0, =2.4.0,...

am.ik.springmvc:new-controller (>=0.1.0, <=0.2.0), br.ufc.quixada.npi:npi-core-api (0.1.0) +549 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.4.release)

org.springframework:spring-context MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - am.ik.springmvc:new-controller =0.1.0, =1.0.1, =0.5.0-rc2, =0.6.0-rc1, =0.6.0-rc1,...

be.rufer.swisscom.sms:api-client (1.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (0.9) +228 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.3.release)

org.springframework:spring-context MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - be.rufer.swisscom.sms:api-client 1.0 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 0....

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +1245 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.2.5.release)

org.springframework:spring-context MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...

ch.ralscha:extdirectspring (1.6.1), cn.vonce:vonce-common (>=1.0.0, <=1.0.3) +302 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.2.2.release)

org.springframework:spring-context MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.ralscha:extdirectspring 1.6.1 - cn.vonce:vonce-common =1.0.0, =0.9.6, =0.8.0,...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-core (1.1.4.release) +434 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.8.release)

org.springframework:spring-context MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

at.molindo:molindo-notify (2.1.0), ch.powerunit.extensions:powerunit-extensions-spring (0.0.1) +628 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.7.release)

org.springframework:spring-context MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:molindo-notify 2.1.0 - ch.powerunit.extensions:powerunit-extensions-spri...

at.rocklogic.kafka:object-support (>=0.2, <=1.1), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.0) +586 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.5.release)

org.springframework:spring-context MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.rocklogic.kafka:object-support =0.2, =0.1.0, =1.3.5 -...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +15703 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (>=6.1.0, <=6.1.19)

org.springframework:spring-context MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0-beta.2 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 and more Source cves:...

ai.optfor:spring-openai-api (>=0.1.3, <=0.3.25), ai.stapi:arango-axon (>=0.0.1, <=0.0.2) +9653 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (>=6.0.0, <=6.0.23)

org.springframework:spring-context MAVEN version =6.0.0, =0.1.3, =0.0.1, =0.0.1, =0.0.10, =0.0.10, =0.0.10, =0.0.6, =0.0.6, =0.0.28, =0.0.6, =0.0.7, =0.0.8, =0.0.11, =0.0.6, =0.3.2 - ai.superstream:spring-kafka 3.0.1-alpha1 and more Source cves: CVE-2025-22233 Source advisory:...

com.github.dalet-oss:mongobee (>=1.0.1, <=1.0.4), com.github.mjeanroy:springmvc-mustache (>=0.6.0, <=1.0.0) +147 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.27.release)

org.springframework:spring-context MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.github.dalet-oss:mongobee =1.0.1, =0.6.0, =0.10.0, =0.10.0, =0.10.0, =1.0.0 -...

com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20) +132 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.29.release)

org.springframework:spring-context MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate =2.3.12,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-spring-boot-starter (0.2.0) +10632 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.2.0, <=6.2.6)

org.springframework:spring-context MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2024-38820, CVE-2025-22233 Source advisory: MEND:CVE-2025-22233...

Improper Handling of Case Sensitivity

Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to an incomplete fix for CVE-2024-38820, where it is still possible to bypass the disallowedFields checks. Note: This vulnerability was also fixed in commercial versions 6.0.28 and 5.3.43...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +15703 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.1.0, <=6.1.19)

org.springframework:spring-context MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0-beta.2 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 and more Source cves:...