com.github.dblock.waffle:waffle-spring-security2 (>=1.7, <=1.7.5), com.googlecode.cedar-common:cedar-common-gae (>=2.1.3, <=5.8.4) +12 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (2.0.8.release)

org.springframework.security:spring-security-core MAVEN version 2.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.7...

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-acl (3.0.1.release) +13 more potentially affected by CVE-2016-5007 via org.springframework.security:spring-security-core (3.0.1.release)

org.springframework.security:spring-security-core MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...