at.molindo.social:spring-social-security (1.1.4.release), com.foreach.across.modules:admin-web-module (1.1.1.release) +88 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.9.release)

org.springframework.security:spring-security-web MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - at.molindo.social:spring-social-security 1.1.4.release ...

co.paralleluniverse:comsat-spring-boot-security (0.7.0), co.paralleluniverse:comsat-spring-security (0.7.0) +226 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.0.4.release)

org.springframework.security:spring-security-web MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - co.paralleluniverse:comsat-spring-boot-security 0.7.0 -...

com.force.sdk:force-springsecurity (>=22.0.2-beta, <=22.0.9-beta), com.logitags:cibet (>=1.1, <=1.9) +17 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.3.release)

org.springframework.security:spring-security-web MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.force.sdk:force-springsecurity =22.0.2-beta, =1.1,...

africa.absa:inception-oauth2-resource-server (>=1.0.0, <=1.2.0), au.org.consumerdatastandards:client-cli (>=1.13.0, <=2.4.1) +1257 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (>=5.5.0, <=5.5.6)

org.springframework.security:spring-security-web MAVEN version =5.5.0, =1.0.0, =1.13.0, =1.13.0, =1.0.0, =0.0.8-alpha, =0.0.1-alpha, =1.0.4.r, =1.0.4.r, =1.0.4.r, =1.0.4.r, =1.7.26, =1.3.30, =1.1.1-alpha, =1.1.1-alpha, =0.0.3-alpha, =0.0.4-alpha-5 and more Source cves: CVE-2022-22978 Source...

org.apache.camel:camel-example-spring-security (>=2.14.0, <=2.14.4), org.apache.cxf.fediz.examples:springpreauthwebapp (>=1.2.2, <=1.2.4) +16 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.1.7.release)

org.springframework.security:spring-security-web MAVEN version 3.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.apache.camel:camel-example-spring-security =2.14.0,...

com.aerse:gcless (11.2), com.hazelcast:hazelcast-wm (>=3.4, <=3.8.3) +99 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.1.release)

org.springframework.security:spring-security-web MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.aerse:gcless 11.2 - com.hazelcast:hazelcast-wm =3.4...

com.cedac.spring.security:spring-security-mongodb (1.0.0), com.devonfw.modules:devonfw-winauth-ad (>=2.4.0, <=3.1.0) +90 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.7.release)

org.springframework.security:spring-security-web MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.cedac.spring.security:spring-security-mongodb 1.0.0...

com.17jee:e-cloud-authorize (3.0.0.release), com.17jee:e-cloud-gateway (>=3.0.0, <=3.0.1.1) +44 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.8.release)

org.springframework.security:spring-security-web MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.17jee:e-cloud-authorize 3.0.0.release -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.2, <=0.1.6) +4280 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (>=5.0.0.release, <=5.4.10)

org.springframework.security:spring-security-web MAVEN version =5.0.0.release, =4.4.0.0, =0.1.2, =0.5.0, =j8.2.4.0, =j8.2.4.0, =0.0.2, =0.0.3, =0.0.5 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 - au.net.causal.shoelaces:shoelaces-assorted-integration-tests-common 2.0 ...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (j11.2.6.0) +1310 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (>=5.6.0, <=5.6.3)

org.springframework.security:spring-security-web MAVEN version =5.6.0, =4.4.0.2, =0.2.0, =2.1.0.m8, =1.0.0, =2.7.0.beta4, =2.7.0.beta4, =2.7.0.beta3, =2.7.0.beta3, =2.7.0.beta3, =2.7.0.beta3, =2.7.0.beta1, =2.7.0.beta1, =2.7.0.beta2 and more Source cves: CVE-2022-22978 Source advisory:...

com.keyholesoftware:khs-sherpa-spring (>=1.2.0, <=1.2.1), org.codehaus.spring-security-oauth:spring-security-oauth (>=3.9.ss3, <=3.11.ss3) +9 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.0.release)

org.springframework.security:spring-security-web MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.keyholesoftware:khs-sherpa-spring =1.2.0, =3.9.ss3,...

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-cas-client (3.0.1.release) +8 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.1.release)

org.springframework.security:spring-security-web MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +10 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.2.release)

org.springframework.security:spring-security-web MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

fr.xebia.springframework:xebia-spring-security-extras (>=1.1.4, <=1.1.6), org.appfuse:appfuse-jsf (2.1.0-m2) +27 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.4.release)

org.springframework.security:spring-security-web MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - fr.xebia.springframework:xebia-spring-security-extras...

com.github.lrkwz:urlmanaged-locale (0.0.1), com.revolsys.open:com.revolsys.open.orm (>=2012.07.30.release, <=2012.11.01.release) +30 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.7.release)

org.springframework.security:spring-security-web MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.lrkwz:urlmanaged-locale 0.0.1 -...

com.github.leleuj.springframework.security:spring-security-oauth-client (>=1.0.0, <=1.1.0), com.github.lltyk:tapestry-spring-security (>=3.0.4, <=3.0.5) +72 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.1.0.release)

org.springframework.security:spring-security-web MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

com.cloudseal.client:cloudseal-spring-extension (>=1.2.1, <=1.2.7), com.cloudseal.client:spring-example (>=1.2.1, <=1.2.7) +135 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.1.3.release)

org.springframework.security:spring-security-web MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.cloudseal.client:cloudseal-spring-extension =1.2.1,...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cosmicpush:push-server (3.1.4) +55 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.0.release)

org.springframework.security:spring-security-web MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...

com.sitewhere:sitewhere-activemq (>=1.0.2, <=1.4.0), com.sitewhere:sitewhere-azure (>=1.0.2, <=1.4.0) +39 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.6.release)

org.springframework.security:spring-security-web MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.sitewhere:sitewhere-activemq =1.0.2, =1.0.2, =1.2.0...

com.ge.predix:uaa-token-lib (>=3.3.2, <=4.0.1), com.github.lizixiang:triph-common (0.0.1-release) +96 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.10.release)

org.springframework.security:spring-security-web MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ge.predix:uaa-token-lib =3.3.2, =1.0.6, =1.0.1,...