be.appify.prefab:prefab-security (>=0.2.0, <=0.7.5), cn.herodotus.dante:dante-authentication-autoconfigure (>=4.0.0.0-m2, <=4.0.0.0-m3) +801 more potentially affected by CVE-2026-22732 via org.springframework.security:spring-security-web (>=7.0.0, <=7.0.3)

org.springframework.security:spring-security-web MAVEN version =7.0.0, =0.2.0, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =1.28.1, =7.0.0-beta.1, =7.1.0 and more Source cves: CVE-2026-22732 Source...

Security Bulletin: IBM Maximo Application Suite - AI Broker Component uses spring-security-web-6.3.3.jar which is vulnerable to this CVE-2024-38821

Summary Security Bulletin: IBM Maximo Application Suite - AI Broker Component uses spring-security-web-6.3.3.jar which is vulnerable to this CVE-2024-38821. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-38821 DESCRIPTION: VMwa...

cc.chensoul.nacos:nacos-distribution (2.5.2), com.buession.security:buession-security-spring (>=3.0.0, <=3.0.1) +583 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-web (>=5.8.0, <=5.8.15)

org.springframework.security:spring-security-web MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.11.0, =5.11.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.4.0, =4.5.0, =4.5.0, =4.5.1 and more Source cves: CVE-2024-38827 Source advisory: MEND:CVE-2024-38827...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.8, <=0.1.11), am.ik.home:uaa-client (>=1.3.0, <=1.9.0) +1289 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-web (>=4.2.0.release, <=4.2.20.release)

org.springframework.security:spring-security-web MAVEN version =4.2.0.release, =0.1.8, =1.3.0, =1.3.0, =1.3.0, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0.3 - at.researchstudio.sat:won-utils-crawl 0.3 and mo...

au.csiro.pathling:fhir-server (>=5.3.1, <=6.4.2), au.org.consumerdatastandards:data-holder (>=2.3.0, <=2.4.1) +2331 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-web (>=5.7.0, <=5.7.13)

org.springframework.security:spring-security-web MAVEN version =5.7.0, =5.3.1, =2.3.0, =2.4.1 - au.org.consumerdatastandards:mock-data-holder-java 2.6.0 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 - br.com.m4rc310:br-com-m4rc310-starter 1.0.1 -...

app.valuationcontrol:library (>=0.5.2, <=0.5.5), app.valuationcontrol:webservice (>=0.5.0, <=0.5.1) +1849 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.2.0, <=6.2.6)

org.springframework.security:spring-security-web MAVEN version =6.2.0, =0.5.2, =0.5.0, =7.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.31 and more Source cves: CVE-2024-38821 Source advisory: OSV:GHSA-C4Q5-6C82-3QPW...

ai.langsa:ccaas-starter (>=cloud-0.1, <=0.6), ai.langsa:pom-ccaas-langsa (0.1) +1497 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.3.0, <=6.3.3)

org.springframework.security:spring-security-web MAVEN version =6.3.0, =cloud-0.1, =1.0.0, =1.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.4.3 and more Source cves: CVE-2024-38821 Source advisory: OSV:GHSA-C4Q5-6C82-3QPW...

cc.vihackerframework:vihacker-security-starter (1.0.8.r), city.smartb.fs:f2-spring-boot-starter-auth-tenant (>=0.15.0-rc1, <=0.15.0) +709 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.0.0, <=6.0.8)

org.springframework.security:spring-security-web MAVEN version =6.0.0, =0.15.0-rc1, =0.12.0, =0.12.0, =0.15.0-rc1, =0.12.0, =0.13.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.4.1, =3.0.4.1, =3.0.4.2 and more Source cves: CVE-2024-38821 Source advisory: GHSA-C4Q5-6C82-3QPW...

ai.langsa:ccaas-starter (>=cloud-0.1, <=0.6), ai.langsa:pom-ccaas-langsa (0.1) +1497 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.3.0, <=6.3.3)

org.springframework.security:spring-security-web MAVEN version =6.3.0, =cloud-0.1, =1.0.0, =1.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.4.3 and more Source cves: CVE-2024-38821 Source advisory: GHSA-C4Q5-6C82-3QPW...

br.com.m4rc310:br-com-m4rc310-gql (1.0.58), br.com.m4rc310:br-com-m4rc310-gtim (1.0.58) +1064 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.1.0, <=6.1.9)

org.springframework.security:spring-security-web MAVEN version =6.1.0, =1.1.4.2, =1.0.3, =1.0.12, =1.0.3, =1.0.0, =1.0.0, =3.1.5.2, =3.0.6.4, =3.1.12.0-final and more Source cves: CVE-2024-38821 Source advisory: OSV:GHSA-C4Q5-6C82-3QPW...

br.com.m4rc310:br-com-m4rc310-gql (1.0.58), br.com.m4rc310:br-com-m4rc310-gtim (1.0.58) +1064 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.1.0, <=6.1.9)

org.springframework.security:spring-security-web MAVEN version =6.1.0, =1.1.4.2, =1.0.3, =1.0.12, =1.0.3, =1.0.0, =1.0.0, =3.1.5.2, =3.0.6.4, =3.1.12.0-final and more Source cves: CVE-2024-38821 Source advisory: GHSA-C4Q5-6C82-3QPW...

app.valuationcontrol:library (>=0.5.2, <=0.5.5), app.valuationcontrol:webservice (>=0.5.0, <=0.5.1) +1849 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.2.0, <=6.2.6)

org.springframework.security:spring-security-web MAVEN version =6.2.0, =0.5.2, =0.5.0, =7.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.31 and more Source cves: CVE-2024-38821 Source advisory: GHSA-C4Q5-6C82-3QPW...

africa.absa:inception-oauth2-resource-server (>=1.0.0, <=1.2.0), ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0) +6026 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=5.0.0.release, <=5.7.12)

org.springframework.security:spring-security-web MAVEN version =5.0.0.release, =1.0.0, =4.4.0.0, =0.1.2, =0.5.0, =j8.2.4.0, =j8.2.4.0, =0.0.2, =0.0.3, =5.3.1, =6.4.2 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 -...

com.buession.security:buession-security-spring (>=3.0.0, <=3.0.1), com.buession.security:buession-security-web (>=3.0.0, <=3.0.1) +563 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=5.8.0, <=5.8.14)

org.springframework.security:spring-security-web MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.11.0, =5.11.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.4.0, =4.5.0, =4.5.0, =4.5.0, =4.5.1 and more Source cves: CVE-2024-38821 Source advisory: OSV:GHSA-C4Q5-6C82-3QPW...

africa.absa:inception-oauth2-resource-server (>=1.0.0, <=1.2.0), ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0) +6026 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=5.0.0.release, <=5.7.12)

org.springframework.security:spring-security-web MAVEN version =5.0.0.release, =1.0.0, =4.4.0.0, =0.1.2, =0.5.0, =j8.2.4.0, =j8.2.4.0, =0.0.2, =0.0.3, =5.3.1, =6.4.2 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 -...

com.buession.security:buession-security-spring (>=3.0.0, <=3.0.1), com.buession.security:buession-security-web (>=3.0.0, <=3.0.1) +563 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=5.8.0, <=5.8.14)

org.springframework.security:spring-security-web MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.11.0, =5.11.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.4.0, =4.5.0, =4.5.0, =4.5.0, =4.5.1 and more Source cves: CVE-2024-38821 Source advisory: GHSA-C4Q5-6C82-3QPW...

app.valuationcontrol:library (>=0.5.2, <=0.5.5), app.valuationcontrol:webservice (>=0.5.0, <=0.5.1) +1849 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.2.0, <=6.2.6)

org.springframework.security:spring-security-web MAVEN version =6.2.0, =0.5.2, =0.5.0, =7.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.31 and more Source cves: CVE-2024-38821 Source advisory: MEND:CVE-2024-38821...

ai.langsa:ccaas-starter (>=cloud-0.1, <=0.6), ai.langsa:pom-ccaas-langsa (0.1) +1497 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=6.3.0, <=6.3.3)

org.springframework.security:spring-security-web MAVEN version =6.3.0, =cloud-0.1, =1.0.0, =1.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.4.3 and more Source cves: CVE-2024-38821 Source advisory: MEND:CVE-2024-38821...

africa.absa:inception-oauth2-resource-server (>=1.0.0, <=1.2.0), ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0) +6026 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=5.0.0.release, <=5.7.12)

org.springframework.security:spring-security-web MAVEN version =5.0.0.release, =1.0.0, =4.4.0.0, =0.1.2, =0.5.0, =j8.2.4.0, =j8.2.4.0, =0.0.2, =0.0.3, =5.3.1, =6.4.2 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 -...

com.buession.security:buession-security-spring (>=3.0.0, <=3.0.1), com.buession.security:buession-security-web (>=3.0.0, <=3.0.1) +563 more potentially affected by CVE-2024-38821 via org.springframework.security:spring-security-web (>=5.8.0, <=5.8.14)

org.springframework.security:spring-security-web MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.11.0, =5.11.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.4.0, =4.5.0, =4.5.0, =4.5.0, =4.5.1 and more Source cves: CVE-2024-38821 Source advisory: MEND:CVE-2024-38821...