cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1) +90 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.5.release)

org.springframework.security:spring-security-web MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - cn.home1:spring-cloud-config-server =0.0.1, =0.0.1,...

cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1) +328 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.5.release)

org.springframework.security:spring-security-core MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cn.home1:spring-cloud-config-server =0.0.1, =0.0.1,...

com.auth0:spring-security-auth0 (0.2), com.brienwheeler.web:web-spring-security (>=1.0-release, <=1.11) +48 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.2.4.release)

org.springframework.security:spring-security-core MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.auth0:spring-security-auth0 0.2 -...

at.researchstudio.sat:won-cryptography (0.3), at.researchstudio.sat:won-matcher (0.3) +1122 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.3.release)

org.springframework.security:spring-security-core MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.researchstudio.sat:won-cryptography 0.3 -...

co.paralleluniverse:comsat-spring-boot-security (0.7.0), co.paralleluniverse:comsat-spring-security (0.7.0) +381 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.0.4.release)

org.springframework.security:spring-security-core MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - co.paralleluniverse:comsat-spring-boot-security 0.7.0...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.btmatthews.atlas:atlas-jcr (1.0.1) +140 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.2.0.release)

org.springframework.security:spring-security-core MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1...

com.ahome-it:ahome-tooling-server-core (>=1.1.19-release, <=1.1.27-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.23-release, <=1.1.27-release) +57 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.0.release)

org.springframework.security:spring-security-web MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.19-release,...

org.springframework.security:spring-security-acl (2.0.2), org.springframework.security:spring-security-adapters (2.0.2) +18 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (2.0.2)

org.springframework.security:spring-security-core MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl 2.0.2 -...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +1535 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (>=5.5.0, <=5.5.6)

org.springframework.security:spring-security-core MAVEN version =5.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.13.0, =1.13.0, =2.2.0 - be.jidoka:jdk-keycloak-admin 1.2.0 and more Source cves: CVE-2022-22978 Source advisory:...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +319 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.0.3.release)

org.springframework.security:spring-security-core MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: -...

com.github.waffle.demo:waffle-spring-filter (2.3.0), com.github.waffle.demo:waffle-spring-form (2.3.0) +41 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.17.release)

org.springframework.security:spring-security-web MAVEN version 4.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.waffle.demo:waffle-spring-filter 2.3.0 -...

com.foreach.imageserver:imageserver-admin (5.0.0.release), com.foreach.imageserver:imageserver-test-embedded (5.0.0.release) +106 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.10.release)

org.springframework.security:spring-security-core MAVEN version 4.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.foreach.imageserver:imageserver-admin...

cc.ereach:ereach-boot-starter-security (1.0.1), com.ge.predix:uaa-token-lib (>=3.3.2, <=4.0.1) +114 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.2.10.release)

org.springframework.security:spring-security-core MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cc.ereach:ereach-boot-starter-security 1.0.1 -...

com.auth0:auth0-spring-security-api (>=1.3.1, <=1.4.0), com.capitalone.dashboard:hygieia-common (>=4.0.5, <=4.1.0) +29 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.2.15.release)

org.springframework.security:spring-security-web MAVEN version 4.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.auth0:auth0-spring-security-api =1.3.1, =4.0.5,...

com.sitewhere:sitewhere-activemq (>=1.0.2, <=1.4.0), com.sitewhere:sitewhere-azure (>=1.0.2, <=1.4.0) +39 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.2.6.release)

org.springframework.security:spring-security-web MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.sitewhere:sitewhere-activemq =1.0.2, =1.0.2, =1.2.0...

at.molindo.social:spring-social-security (1.1.0.release), cn.jhc:spring-social-qq (>=0.0.2, <=0.0.5) +128 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.2.3.release)

org.springframework.security:spring-security-core MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - at.molindo.social:spring-social-security 1.1.0.releas...

com.carecon.fabric3:fabric3-spring (>=3.0.0, <=3.1.0), com.carecon.fabric3:fabric3-spring-library (>=3.0.0, <=3.1.0) +17 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.0.8.release)

org.springframework.security:spring-security-web MAVEN version 3.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.carecon.fabric3:fabric3-spring =3.0.0, =3.0.0,...

cn.bestwu:security-oauth2-authorizationserver (1.0.1), cn.dceast.platform:platform-security-starter (2.2.3) +526 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.1.3.release)

org.springframework.security:spring-security-core MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cn.bestwu:security-oauth2-authorizationserver 1.0.1 -...

org.apache.ranger:ranger-kylin-plugin (>=2.3.0, <=2.4.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.3.0, <=2.4.0) +12 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.14.release)

org.springframework.security:spring-security-core MAVEN version 4.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.3.0, =2.3.0...

be.dnsbelgium:rdap-server (1.1.0), co.paralleluniverse:comsat-spring-boot-security (0.4.0) +64 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (4.0.1.release)

org.springframework.security:spring-security-web MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - be.dnsbelgium:rdap-server 1.1.0 -...