br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +544 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.2.5.release)

org.springframework:spring-web MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base...

at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-core (1.1.0.release) +171 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.0.3.release)

org.springframework:spring-web MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release - at.molindo.social:spring-social-core...

com.att.nsa:msgrtr (0.0.5), com.comcast.magic-wand:appium (>=4.0.1, <=4.0.3) +47 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.2.14.release)

org.springframework:spring-web MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.att.nsa:msgrtr 0.0.5 - com.comcast.magic-wand:appium =4.0.1, =4.0.3 -...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.4, <=3.0.1), br.net.woodstock.rockframework:rockframework-faces (>=2.0.0, <=2.0.8) +414 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.0.6.release)

org.springframework:spring-web MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.4, =2.0.0, =2.0.0, =2.0.0, =1.2.4,...

net.sourceforge.openutils:openutils-spring (0.2) potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0-m5)

org.springframework:spring-web MAVEN version 2.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - net.sourceforge.openutils:openutils-spring 0.2 Source cves: CVE-2024-38809 Source advisory:...

com.bytebybyte:google-geocoding (>=3.0.0, <=3.0.1), com.bytebybyte:mapquest-open-geocoding (1.0.0) +102 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.0.7.release)

org.springframework:spring-web MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.bytebybyte:google-geocoding =3.0.0, =0.0.1, =1.0.2, =1.0.2, =1.0.2, =1.2.3.release,...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.2), cc.ecore:spring-jfinal-plus (0.1.2) +95 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.2.0.release)

org.springframework:spring-web MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.2 - cc.ecore:spring-jfinal-plus 0.1.2 -...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +932 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.9.release)

org.springframework:spring-web MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.1, =1.7, =1.1.1, =1.0, =1.0.1, =1.1.12, =1.1.12,...

ai.optfor:spring-openai-api (>=0.1, <=0.3.25), ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3) +5711 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (>=6.0.0, <=6.0.22)

org.springframework:spring-web MAVEN version =6.0.0, =0.1, =0.0.22, =0.0.28, =0.0.11, =0.1.0, =0.1.0, =0.2.3, =0.1.0, =0.0.6, =0.0.6, =4.5.0-beta.1, =4.7.0-beta.0 - au.net.causal.shoelaces:shoelaces-apphome 3.0 - au.net.causal.shoelaces:shoelaces-assorted 3.0 -...

com.github.ideahut:sbms-hessian (>=1.0.0, <=1.0.1), com.github.ideahut:sbms-httpinvoker (1.0.1) +76 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0.8)

org.springframework:spring-web MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.ideahut:sbms-hessian =1.0.0, =1.0.1, =5.0.0, =1.0, =2.1.7, =2.1.7, =2.1.7, =2.1.10 and...

com.custardsource.parfait:parfait-cxf (>=0.2.0, <=0.3.9), edu.usc.ir:lucene-geo-gazetteer (0.2) +117 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.5.5)

org.springframework:spring-web MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.custardsource.parfait:parfait-cxf =0.2.0, =1.0.15, =1.0.15, =1.0.15, =0.4.0, =1.4.0, =1.4.0,...

com.antgroup.tugraph:tugraph-db-java-rpc-client (>=1.1.0, <=1.2.1), com.antgroup.tugraph:tugraph-db-java-rpc-client-test (>=1.1.0, <=1.2.1) +161 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.2.11.release)

org.springframework:spring-web MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.antgroup.tugraph:tugraph-db-java-rpc-client =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +78 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.0.8.release)

org.springframework:spring-web MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 - co.paralleluniverse:comsat-spring-webmvc 0.3...

com.webtide.hightide:hightide-resources (6.1h.8), net.sourceforge.openutils:openutils-spring (1.0.4) +63 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0.6)

org.springframework:spring-web MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.webtide.hightide:hightide-resources 6.1h.8 - net.sourceforge.openutils:openutils-spring 1.0.4 -...

com.free-now.apis:phrase-java-client (>=1.0.8, <=3.0.0), com.free-now.maven.plugins:phrase-plugin (>=2.0.0, <=2.1.0) +41 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.2.15.release)

org.springframework:spring-web MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.free-now.apis:phrase-java-client =1.0.8, =2.0.0, =1.0.0, =1.0.0, =1.0.3, =1.1.3, =1.0....

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cedarsoftware:json-command-servlet (>=1.0.0, <=1.1.2) +110 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.2.6.release)

org.springframework:spring-web MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), com.apigee.edge.config:apigee-config-maven-plugin (>=1.3, <=2.2.2) +337 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.20.release)

org.springframework:spring-web MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1391 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.5.6.sec03)

org.springframework:spring-web MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.0, =1.0, =0.0.1, =0.1.1...

capital.scalable:spring-auto-restdocs-core (>=1.0.10, <=1.0.13), cc.catalysts.boot:cat-boot-api (>=0.2.13, <=0.2.28) +761 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.11.release)

org.springframework:spring-web MAVEN version 4.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - capital.scalable:spring-auto-restdocs-core =1.0.10, =0.2.13, =0.2.13, =0.2.13, =1.0.0,...

com.51degrees:device-detection (>=4.4.1, <=4.4.2), com.51degrees:geo-location.web.examples.mvc (>=4.3.10, <=4.3.11) +357 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.30.release)

org.springframework:spring-web MAVEN version 4.3.30.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.51degrees:device-detection =4.4.1, =4.3.10, =4.3.10, =4.3.14, =4.3.14, =4.3.14, =2.14....