Tobias Kuhn

[FP]: Unapplicable CVEs reported for spring-boot-starter-oauth2-resource-server-2.7.0.jar

3

### Package URl pkg:maven/org.springframework.boot/[email protected] ### CPE `cpe:2.3:a:pivotal:spring_security_oauth:2.7.0:*:*:*:*:*:*:*`, `cpe:2.3:a:pivotal_software:spring_security:2.7.0:*:*:*:*:*:*:*`, `cpe:2.3:a:pivotal_software:spring_security_oauth:2.7.0:*:*:*:*:*:*:*`, `cpe:2.3:a:vmware:server:2.7.0:*:*:*:*:*:*:*`, `cpe:2.3:a:vmware:spring_boot:2.7.0:*:*:*:*:*:*:*`, `cpe:2.3:a:vmware:spring_security:2.7.0:*:*:*:*:*:*:*` ### CVE CVE-2022-22978, CVE-2018-1258, CVE-2021-22112, CVE-2022-22976 ### ODC Integration {"label"=>"Gradle Plugin"} ### ODC Version 7.1.1 ### Description The...

[FP]: spring-security-oauth2-authorization-server is mistaken for other Spring projects

2

### Package URl pkg:maven/org.springframework.security/[email protected] ### CPE `cpe:2.3:a:pivotal:spring_security_oauth:0.3.1:*:*:*:*:*:*:*`, `cpe:2.3:a:pivotal_software:spring_security:0.3.1:*:*:*:*:*:*:*`, `cpe:2.3:a:pivotal_software:spring_security_oauth:0.3.1:*:*:*:*:*:*:*`, `cpe:2.3:a:vmware:spring_security:0.3.1:*:*:*:*:*:*:*` ### CVE CVE-2018-1260, CVE-2022-22978, CVE-2021-22112, CVE-2018-15758, CVE-2022-22969, CVE-2022-22976 ### ODC Integration {"label"=>"Gradle Plugin"} ### ODC Version 7.1.1 ### Description From...

SchemaParser should not return appliedDirectives under directives

7

## Description I'm seeing unexpected behavior from `SchemaParser` that prevents me to properly upgrade to the newest versions of graphql-java 19.2 & graphql-java-kickstart 15. I'm using GraphQL Federation via `com.apollographql.federation:federation-graphql-java-support:2.2.0`...

Strange sporadic "Could not get yarn cache folder path" with v3

11

**Description:** We currently encounter sporadic issues in our CI pipelines that make use of setup-node@v3 with Yarn 1 Caching. During `setup-node` the command `yarn cache dir` fails for only one...

Cannot inject DataLoader<> directly from auto configured @BatchMapping

7

I'm in the process of porting an existing project to spring-graphql 1.3.1 and want to use all of its convenience features for more readable code. From the docs about annotated...