Security
فارسی
All products

Red Hat Process Automation 7/springframework

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework URL Parsing with Host Validation VulnerabilityCVE-2024-22259 · GHSA-HGJH-9RJ2-G67J org.springframework:spring-webRed Hat Fuse 7/springframework MavenRed Hat High Fix reported
Spring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861 · GHSA-564R-HJ7V-MCR5 org.springframework:spring-expressionRed Hat AMQ Broker 7/springframework MavenRed Hat Medium Fix reported
Authorization bypass in Spring SecurityCVE-2022-22978 · GHSA-HH32-7344-CG2F org.springframework.security:spring-security-coreorg.springframework.security:spring-security-web MavenRed Hat Critical Fix reported
Integer overflow in BCrypt class in Spring SecurityCVE-2022-22976 · GHSA-WX54-3278-M5G4 org.springframework.security:spring-security-coreRed Hat Decision Manager 7/springframework MavenRed Hat Medium Fix reported
Improper handling of case sensitivity in Spring FrameworkCVE-2022-22968 · GHSA-G5MM-VMX4-3RG7 org.springframework:spring-contextLogging Subsystem for Red Hat OpenShift/springframework MavenRed Hat High Fix reported
Denial of service in Spring FrameworkCVE-2022-22970 · GHSA-HH26-6XWR-GGV7 org.springframework:spring-beansRed Hat Decision Manager 7/springframework MavenRed Hat High Fix reported
Allocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22971 · GHSA-RQPH-VQWM-22VC org.springframework:spring-messagingRed Hat Decision Manager 7/springframework MavenRed Hat Medium Fix reported