EUVD-2024-0908

Malicious code in bioql PyPI...

EUVD-2022-2081

Malicious code in bioql PyPI...

EUVD-2024-0745

Malicious code in bioql PyPI...

EUVD-2023-1423

Malicious code in bioql PyPI...

EUVD-2023-1959

Malicious code in bioql PyPI...

EUVD-2023-2816

Malicious code in bioql PyPI...

EUVD-2025-15999

Malicious code in bioql PyPI...

EUVD-2025-7998

Malicious code in bioql PyPI...

EUVD-2025-29538

Malicious code in bioql PyPI...

EUVD-2024-2598

Malicious code in bioql PyPI...

EUVD-2022-1699

Malicious code in bioql PyPI...

EUVD-2022-7386

Malicious code in bioql PyPI...

EUVD-2024-0410

Malicious code in bioql PyPI...

CicadasCMS 代码注入漏洞

CicadasCMS is a content management framework based on SpringBoot Mybatis SpringSecurity Vue developed by westboy individual developers in China. A code injection vulnerability exists in CicadasCMS version 1.0, which originates from the incorrect operation of the parameter categoryName in the file...

Spring Security annotation detection mechanism has authorization bypass

The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization...

GHSA-8V5Q-RHF3-JPHM Spring Security annotation detection mechanism has authorization bypass

The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization...

app.valuationcontrol:library (>=0.5.8, <=0.5.9), at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2) +2716 more potentially affected by CVE-2025-41248 via org.springframework.security:spring-security-core (>=6.4.0, <=6.4.9)

org.springframework.security:spring-security-core MAVEN version =6.4.0, =0.5.8, =0.0.1, =55.v51410e712e0c, =1.5.4.release, =1.0.1, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =1.0.18 - cc.zzzyu.nacos:nacos-ai 3.1.1 - cc.zzzyu.nacos:nacos-cmdb 3.1.1 - cc.zzzyu.nacos:nacos-config 3.1.1 and mor...

app.valuationcontrol:library (>=0.5.8, <=0.5.9), at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2) +2716 more potentially affected by CVE-2025-41248 via org.springframework.security:spring-security-core (>=6.4.0, <=6.4.9)

org.springframework.security:spring-security-core MAVEN version =6.4.0, =0.5.8, =0.0.1, =55.v51410e712e0c, =1.5.4.release, =1.0.1, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =1.0.18 - cc.zzzyu.nacos:nacos-ai 3.1.1 - cc.zzzyu.nacos:nacos-cmdb 3.1.1 - cc.zzzyu.nacos:nacos-config 3.1.1 and mor...

be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.8.release), cc.zzzyu.nacos:nacos-ai (3.1.1) +2017 more potentially affected by CVE-2025-41248 via org.springframework.security:spring-security-core (>=6.4.4, <=6.4.9)

org.springframework.security:spring-security-core MAVEN version =6.4.4, =1.5.4.release, =1.12.0, =1.12.0, =1.23.0 and more Source cves: CVE-2025-41248 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKSECURITY-12817818...

Incorrect Authorization

Overview org.springframework.security:spring-security-core is a package that provides security services for the Spring IO Platform. Affected versions of this package are vulnerable to Incorrect Authorization via the annotation detection mechanism when resolving annotations on methods within type...