com.almis.awe:awe-controller (>=4.1.2, <=4.1.7), com.almis.awe:awe-developer (>=4.1.2, <=4.1.7) +11 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.24.release)

org.springframework:spring-websocket MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.almis.awe:awe-controller =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.1.2,...

net.apexes.wsonrpc:wsonrpc (0.5.0), org.springframework.integration:spring-integration-websocket (4.1.0.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.1.2.release)

org.springframework:spring-websocket MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - net.apexes.wsonrpc:wsonrpc 0.5.0 -...

org.springframework.integration:spring-integration-websocket (4.2.13.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.9.release)

org.springframework:spring-websocket MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.integration:spring-integration-websocket 4.2.13.release...

com.ahome-it:ahome-tooling-server-core (1.0.109-release), com.ahome-it:ahome-tooling-server-hazelcast (1.0.109-release) +8 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.0.release)

org.springframework:spring-websocket MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.0.109-release -...

at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21) +927 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=6.2.0, <=6.2.11)

org.springframework:spring-websocket MAVEN version =6.2.0, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2025-41254 Source advisory: MEND:CVE-2025-41254...

Cross-site Request Forgery (CSRF)

Overview org.springframework:spring-websocket is a framework that provides a comprehensive programming and configuration model for modern Java-based enterprise applications - on any kind of deployment platform. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF vi...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), br.com.m4rc310:br-com-m4rc310-graphql (1.0.1) +1237 more potentially affected by CVE-2024-38820 via org.springframework:spring-websocket (>=5.3.0, <=5.3.39)

org.springframework:spring-websocket MAVEN version =5.3.0, =4.4.0.2, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.2.0, =6.8.0, =6.4.0, =5.3.0, =6.10.5 and more Source cves: CVE-2024-38820 Source advisory: MEND:CVE-2024-38820...

org.springframework.security:spring-security-cas (5.0.18.release), org.springframework.security:spring-security-oauth2-client (5.0.18.release) +8 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.18.release)

org.springframework:spring-web MAVEN version 5.0.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework.security:spring-security-cas 5.0.18.release -...

org.springframework:spring-webflux (5.3.38), org.springframework:spring-webmvc (5.3.38) +1 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.3.38)

org.springframework:spring-web MAVEN version 5.3.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-webflux 5.3.38 - org.springframework:spring-webmvc 5.3.38 -...

io.github.opensabre:common-web (>=0.0.1, <=0.0.2), org.springframework.security:spring-security-cas (>=5.0.16.release, <=5.0.17.release) +9 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.17.release)

org.springframework:spring-web MAVEN version 5.0.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - io.github.opensabre:common-web =0.0.1, =5.0.16.release, =5.0.16.release, =5.0.16.release,...

com.languageweaver.sdk:auth (>=1.5, <=2.2), com.mercateo.rest:rest-schemagen-spring (0.3.0) +5 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.20.release)

org.springframework:spring-web MAVEN version 5.0.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.languageweaver.sdk:auth =1.5, =1.0.6, =1.0.7 - org.springframework:spring-webflux...