app.valuationcontrol:library (>=0.5.8, <=0.5.9), at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2) +2731 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (>=6.4.0, <=6.4.3)

org.springframework.security:spring-security-crypto MAVEN version =6.4.0, =0.5.8, =0.0.1, =0.0.1, =55.v51410e712e0c, =1.0.1, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =2.3.0, =1.10.0, =1.10.0, =1.11.0 and more Source cves: CVE-2025-22228 Source advisory:...

au.csiro.pathling:fhir-server (>=5.3.1, <=6.4.2), au.org.consumerdatastandards:data-holder (>=2.3.0, <=2.4.1) +4111 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-crypto (>=5.7.0, <=5.7.13)

org.springframework.security:spring-security-crypto MAVEN version =5.7.0, =5.3.1, =2.3.0, =6.10.0, =6.4.0, =8.2.2 - cc.chensoul.nacos:core-test 2.5.2 - cc.chensoul.nacos:nacos-address 2.5.2 - cc.chensoul.nacos:nacos-cmdb 2.5.2 - cc.chensoul.nacos:nacos-config 2.5.2 - cc.chensoul.nacos:nacos-conso...

br.jus.stf.digital:core (>=0.2.0, <=2.3.1), br.jus.stf.digital:test (>=1.0.3, <=1.1.0) +1383 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-crypto (>=4.2.0.release, <=4.2.13.release)

org.springframework.security:spring-security-crypto MAVEN version =4.2.0.release, =0.2.0, =1.0.3, =1.0.2, =1.0.2, =1.4.10, =3.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1.u1 - cn.home1:spring-cloud-service-filter 1.0.1.u1 - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 -...

Integer Overflow

org.springframework.security:spring-security-crypto is vulnerable to integer overflows. The encoder does not perform any salt rounds when the BCrypt class is used with the maximum work factor31, allowing a local authenticated attacker to cause an integer overflow error resulting in the attacker...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +6946 more potentially affected by CVE-2022-22976 via org.springframework.security:spring-security-crypto (>=3.1.0.release, <=5.5.6)

org.springframework.security:spring-security-crypto MAVEN version =3.1.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2022-22976 Source advisory: MEND:CVE-2022-22976...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (j11.2.6.0) +2209 more potentially affected by CVE-2022-22976 via org.springframework.security:spring-security-crypto (>=5.6.0, <=5.6.3)

org.springframework.security:spring-security-crypto MAVEN version =5.6.0, =4.4.0.2, =1.3.1.release, =1.2.6.release, =0.2.0, =0.8.3, =2.1.0.m8, =1.0.0, =0.2.2, =0.2.5 - cn.benma666:sjds 0.2.5 and more Source cves: CVE-2022-22976 Source advisory: MEND:CVE-2022-22976...