org.appfuse.archetypes:appfuse-basic-jsf (2.0.2), org.appfuse.archetypes:appfuse-basic-spring (2.0.2) +42 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (2.0.1)

org.springframework.security:spring-security-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.appfuse.archetypes:appfuse-basic-jsf 2.0.2 -...

com.cedac.spring.security:spring-security-mongodb (1.0.0), com.foreach.across.modules:admin-web-module (>=1.0.0.release, <=1.1.0.release) +127 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.2.7.release)

org.springframework.security:spring-security-core MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.cedac.spring.security:spring-security-mongodb 1.0...

cn.bestwu:security-oauth2-authorizationserver (1.0.1), cn.dceast.platform:platform-security-starter (2.2.3) +526 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (4.1.3.release)

org.springframework.security:spring-security-core MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cn.bestwu:security-oauth2-authorizationserver 1.0.1 -...

at.molindo.social:spring-social-security (1.1.4.release), com.foreach.across.modules:admin-web-module (1.1.1.release) +90 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.2.9.release)

org.springframework.security:spring-security-core MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.4.releas...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), com.github.yongjacky:jee.borneo.miri (1.1.6) +111 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.1.4.release)

org.springframework.security:spring-security-core MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =1.6-2, =1.6.0,...

org.apache.syncope:syncope-core (>=1.0.9, <=1.1.8), org.springframework.security:spring-security-acl (3.1.6.release) +11 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.1.6.release)

org.springframework.security:spring-security-core MAVEN version 3.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.apache.syncope:syncope-core =1.0.9, =1.4.9, =1.4....

com.silicolife.textmining:core (>=1.0.3, <=1.1.0), org.ff4j:ff4j-security-spring (>=1.8.2, <=1.8.7) +24 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (4.1.5.release)

org.springframework.security:spring-security-core MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.silicolife.textmining:core =1.0.3, =1.8.2, =1.8.7...

cc.chensoul.nacos:nacos-distribution (2.5.2), cn.sparrowmini:sparrow-org-service (0.0.1) +738 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (>=5.8.0, <=5.8.15)

org.springframework.security:spring-security-core MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.2.0, =5.11.0, =5.11.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.6.0 and more Source cves: CVE-2024-38827 Source advisory: OSV:GHSA-Q3V6-HM2V-PW99...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.btmatthews.atlas:atlas-jcr (1.0.1) +140 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.2.0.release)

org.springframework.security:spring-security-core MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1...

cn.springcloud.gray:spring-cloud-gray-server (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-cluster-http-synchro-plugin (>=a.2.0.0.rc1, <=a.2.0.0) +202 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (4.2.13.release)

org.springframework.security:spring-security-core MAVEN version 4.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cn.springcloud.gray:spring-cloud-gray-server =a.1.1....

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-acl (3.0.1.release) +13 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.0.1.release)

org.springframework.security:spring-security-core MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...

com.capitalone.dashboard:core (>=3.7.8, <=3.9.9), com.github.waffle.demo:waffle-spring-filter (2.3.0) +56 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (4.2.17.release)

org.springframework.security:spring-security-core MAVEN version 4.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.capitalone.dashboard:core =3.7.8, =1.7-15, =1.7-...

app.valuationcontrol:library (>=0.5.2, <=0.5.6), app.valuationcontrol:webservice (>=0.5.0, <=0.5.1) +2228 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (>=6.2.0, <=6.2.7)

org.springframework.security:spring-security-core MAVEN version =6.2.0, =0.5.2, =0.5.0, =7.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.31 and more Source cves: CVE-2024-38827 Source advisory: GHSA-Q3V6-HM2V-PW99...

au.org.consumerdatastandards:client-cli (>=1.1.1, <=1.12.0), com.atlassian.asap:asap-server-spring-security (>=2.21.8, <=2.21.9) +119 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (4.2.11.release)

org.springframework.security:spring-security-core MAVEN version 4.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - au.org.consumerdatastandards:client-cli =1.1.1,...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +7370 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (>=5.0.0.release, <=5.7.13)

org.springframework.security:spring-security-core MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =0.1.2, =0.5.0, =0.5.24 and more Source cves: CVE-2024-38827 Source advisory: GHSA-Q3V6-HM2V-PW99...

com.foreach.imageserver:imageserver-admin (5.0.0.release), com.foreach.imageserver:imageserver-test-embedded (5.0.0.release) +106 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (4.2.10.release)

org.springframework.security:spring-security-core MAVEN version 4.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.foreach.imageserver:imageserver-admin...

com.sitewhere:sitewhere-activemq (>=1.0.2, <=1.4.0), com.sitewhere:sitewhere-azure (>=1.0.2, <=1.4.0) +68 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.2.6.release)

org.springframework.security:spring-security-core MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.sitewhere:sitewhere-activemq =1.0.2, =1.0.2,...

com.auth0:spring-security-auth0 (0.2), com.brienwheeler.web:web-spring-security (>=1.0-release, <=1.11) +48 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.2.4.release)

org.springframework.security:spring-security-core MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.auth0:spring-security-auth0 0.2 -...

at.molindo.social:spring-social-security (1.1.0.release), cn.jhc:spring-social-qq (>=0.0.2, <=0.0.5) +128 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (3.2.3.release)

org.springframework.security:spring-security-core MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.0.releas...

cc.kebei:onion-expands-office (>=3.0.3, <=3.0.6), cc.kebei:onion-expands-script (>=3.0.3, <=3.0.6) +121 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-core (4.2.12.release)

org.springframework.security:spring-security-core MAVEN version 4.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cc.kebei:onion-expands-office =3.0.3, =3.0.3, =3.0.3...