api

api copied to clipboard

## CVE-2022-40152 - High Severity Vulnerability Vulnerable Library - woodstox-core-6.2.4.jar Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs Library home page: https://github.com/FasterXML/woodstox Path to...

mend-bolt-for-github[bot]

## CVE-2022-42252 - High Severity Vulnerability Vulnerable Library - tomcat-embed-core-9.0.65.jar Core Tomcat implementation Library home page: https://tomcat.apache.org/ Path to dependency file: /pom.xml Path to vulnerable library: /er/.m2/repository/org/apache/tomcat/embed/tomcat-embed-core/9.0.65/tomcat-embed-core-9.0.65.jar Dependency Hierarchy: -...

mend-bolt-for-github[bot]

## CVE-2023-20863 - Medium Severity Vulnerability Vulnerable Library - spring-expression-5.3.18.jar Spring Expression Language (SpEL) Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.3.18/spring-expression-5.3.18.jar Dependency Hierarchy: - spring-security-web-5.6.4.jar (Root Library)...

mend-bolt-for-github[bot]

## CVE-2023-24998 - High Severity Vulnerability Vulnerable Library - commons-fileupload-1.4.jar The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to...

mend-bolt-for-github[bot]

## CVE-2023-20860 - High Severity Vulnerability Vulnerable Library - spring-webmvc-5.3.18.jar Spring Web MVC Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-webmvc/5.3.18/spring-webmvc-5.3.18.jar Dependency Hierarchy: - spring-boot-starter-web-2.5.12.jar (Root Library) -...

mend-bolt-for-github[bot]

CVE-2016-1000027 (High) detected in spring-web-5.3.18.jar

2

## CVE-2016-1000027 - High Severity Vulnerability Vulnerable Library - spring-web-5.3.18.jar Spring Web Library home page: https://github.com/spring-projects/spring-framework Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-web/5.3.18/spring-web-5.3.18.jar Dependency Hierarchy: - core-4.0.1.jar...

mend-bolt-for-github[bot]

## CVE-2022-31692 - High Severity Vulnerability Vulnerable Library - spring-security-web-5.6.4.jar Spring Security Library home page: https://spring.io/projects/spring-security Path to dependency file: /pom.xml Path to vulnerable library: /er/.m2/repository/org/springframework/security/spring-security-web/5.6.4/spring-security-web-5.6.4.jar Dependency Hierarchy: - :x:...

mend-bolt-for-github[bot]

## CVE-2023-20861 - Medium Severity Vulnerability Vulnerable Library - spring-expression-5.3.18.jar Spring Expression Language (SpEL) Path to dependency file: /pom.xml Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.3.18/spring-expression-5.3.18.jar Dependency Hierarchy: - spring-security-web-5.6.4.jar (Root Library)...

mend-bolt-for-github[bot]

## CVE-2022-1471 - High Severity Vulnerability Vulnerable Library - snakeyaml-1.33.jar YAML 1.1 parser and emitter for Java Library home page: https://bitbucket.org/snakeyaml/snakeyaml Path to dependency file: /pom.xml Path to vulnerable library:...

mend-bolt-for-github[bot]

Bump spring-core from 5.3.20 to 5.3.27

1

Bumps [spring-core](https://github.com/spring-projects/spring-framework) from 5.3.20 to 5.3.27. Release notes Sourced from spring-core's releases. v5.3.27 :star: New Features Limit string concatenation in SpEL expressions #30331 Limit SpEL expression length #30329 Disable variable...

dependabot[bot]