cn.guomw.cloud:framework-cloud-starter-web (>=1.0.0.release, <=1.1.0.1.btxc.release), org.nhind:config-service-jar (7.0.2) +3 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.9.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - cn.guomw.cloud:framework-cloud-starter-web =1.0.0.release...

cn.fxbin.bubble:bubble-fireworks-starter-web (0.0.9-release), cn.fxbin.bubble:bubble-fireworks-test-data-elasticsearch (0.0.9-release) +18 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.1.5.final)

io.undertow:undertow-core MAVEN version 2.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - cn.fxbin.bubble:bubble-fireworks-starter-web 0.0.9-release -...

io.github.wwwlike:vlife-boot-starter-web (>=1.0.4, <=1.0.7), io.github.wwwlike:vlife-core (>=1.0.4, <=1.0.7) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (>=1.0.4, <=1.0.7)

io.github.wwwlike:vlife-base MAVEN version =1.0.4, =1.0.4, =1.0.4, =1.0.4, =1.0.2, =1.0.7 Source cves: CVE-2025-13266 Source advisory: SNYK:JAVA-IOGITHUBWWWLIKE-14038399...

io.github.wwwlike:vlife-boot-starter-web (1.0.4), io.github.wwwlike:vlife-core (1.0.4) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.4)

io.github.wwwlike:vlife-base MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.4 - io.github.wwwlike:vlife-core 1.0.4 -...

io.github.wwwlike:vlife-boot-starter-web (1.0.5), io.github.wwwlike:vlife-core (1.0.5) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.5)

io.github.wwwlike:vlife-base MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.5 - io.github.wwwlike:vlife-core 1.0.5 -...

io.github.wwwlike:vlife-boot-starter-web (1.0.6), io.github.wwwlike:vlife-core (1.0.6) +1 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.6)

io.github.wwwlike:vlife-base MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.6 - io.github.wwwlike:vlife-core 1.0.6 -...

io.github.wwwlike:vlife-boot-starter-web (1.0.7), io.github.wwwlike:vlife-core (1.0.7) +2 more potentially affected by CVE-2025-13266 via io.github.wwwlike:vlife-base (1.0.7)

io.github.wwwlike:vlife-base MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.github.wwwlike:vlife-base and may be impacted: - io.github.wwwlike:vlife-boot-starter-web 1.0.7 - io.github.wwwlike:vlife-core 1.0.7 -...

Memory corruption

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

Vulnerability fixed in VMware Tanzu Spring Framework

VMWare Tanzu has fixed a vulnerability in Spring Framework. An unauthenticated malicious person could exploit the vulnerability to cause a denial-of-service on an application running in the framework. The prerequisite for successful exploitation is that the application uses of the...

app.myoss.cloud.boot:myoss-starter-apm (>=2.1.0.release, <=2.1.6.release), app.myoss.cloud.boot:myoss-starter-web (>=2.1.0.release, <=2.1.6.release) +1047 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.1.4.release)

org.springframework:spring-web MAVEN version 5.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - app.myoss.cloud.boot:myoss-starter-apm =2.1.0.release, =2.1.0.release, =2.1.2.release,...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +12682 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=1.0.0.release, <=2.5.11)

org.springframework.boot:spring-boot-starter-web MAVEN version =1.0.0.release, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =greenwich.sr2.1 and more Source cves: CVE-2022-22965 Source advisory:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (j11.2.6.0) +1765 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (>=2.6.0, <=2.6.5)

org.springframework.boot:spring-boot-starter-web MAVEN version =2.6.0, =4.4.0.2, =1.2.5.release, =0.1.2, =5.7.7, =5.7.7, =5.7.7, =1.0.0, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2022-22965 Source advisory: MEND:CVE-2022-22965...

org.springframework.boot:spring-boot-starter-data-rest (1.0.0.release), org.springframework.boot:spring-boot-starter-mobile (1.0.0.release) +2 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.0.0.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

com.ebay:lightning-client (0.9.0), com.ebay:lightning-core (0.9.0) +4 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.0.1.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.ebay:lightning-client 0.9.0 - com.ebay:lightning-co...

com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3), com.github.pjagielski.spring-boot-swagger:spring-boot-swagger (0.1) +11 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.0.2.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.blitline:blitline-image-client-example =0.10.1,...

org.springframework.boot:spring-boot-starter-data-rest (1.1.0.release), org.springframework.boot:spring-boot-starter-freemarker (1.1.0.release) +9 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.0.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr2), io.fabric8:process-spring-boot-itests-service-invoicing (1.1.0.cr2) +11 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.1.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing 1.1.0.c...

org.springframework.boot:spring-boot-starter-data-rest (1.1.2.release), org.springframework.boot:spring-boot-starter-freemarker (1.1.2.release) +9 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.2.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr3), io.fabric8:process-spring-boot-itests-service-invoicing (>=1.1.0.cr3, <=1.1.0.cr5) +11 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.3.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing 1.1.0.c...

com.github.totyumengr:minicubes-cluster (0.2), com.kurento.kmf:kmf-broker (4.3.1) +30 more potentially affected by CVE-2022-22965 via org.springframework.boot:spring-boot-starter-web (1.1.4.release)

org.springframework.boot:spring-boot-starter-web MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-web and may be impacted: - com.github.totyumengr:minicubes-cluster 0.2 -...