Vulnerabilities	2 via 76 paths
Dependencies	41
Source	GitHub
Commit	00b50866

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications

Issue type

Vulnerabilities
2
License issues
2

Severity

Critical
High
1
Medium
3
Low

Status

Open
4
Patched
0
Ignored
0

high severity

new

Incorrect Authorization

Vulnerable module: org.springframework:spring-core
Introduced through: org.springframework.boot:spring-boot-starter-actuator@3.5.5 and org.springframework.boot:spring-boot-starter-web@3.5.5

Detailed paths

Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-web@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-web@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework:spring-web@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-web@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework:spring-web@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-web@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-actuator@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework:spring-webmvc@6.2.10 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-actuator@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-actuator@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-actuator@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-actuator@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-actuator@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-actuator-autoconfigure@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-actuator@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-expression@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-autoconfigure@3.5.5 › org.springframework.boot:spring-boot@3.5.5 › org.springframework:spring-context@6.2.10 › org.springframework:spring-aop@6.2.10 › org.springframework:spring-beans@6.2.10 › org.springframework:spring-core@6.2.10

Remediation: Upgrade to org.springframework.boot:spring-boot-starter-web@3.5.6.

Overview

org.springframework:spring-core is a core package within the spring-framework that contains multiple classes and utilities.

Affected versions of this package are vulnerable to Incorrect Authorization via the AnnotationsScanner and AnnotatedMethod class. An attacker can gain unauthorized access to sensitive information by exploiting improper resolution of annotations on methods within type hierarchies that use parameterized supertypes with unbounded generics.

Note: This is only exploitable if security annotations are used on methods in generic superclasses or generic interfaces and the @EnableMethodSecurity feature is enabled.

Remediation

Upgrade org.springframework:spring-core to version 6.2.11 or higher.

References

Incorrect Authorization vulnerability report

medium severity

new

External Initialization of Trusted Variables or Data Stores

Vulnerable module: ch.qos.logback:logback-core
Introduced through: org.springframework.boot:spring-boot-starter-actuator@3.5.5 and org.springframework.boot:spring-boot-starter-web@3.5.5

Detailed paths

Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18

Overview

ch.qos.logback:logback-core is a logback-core module.

Affected versions of this package are vulnerable to External Initialization of Trusted Variables or Data Stores via the conditional processing of the logback.xml configuration file when both the Janino library and Spring Framework are present on the class path. An attacker can execute arbitrary code by compromising an existing configuration file or injecting a malicious environment variable before program execution. This is only exploitable if the attacker has write access to a configuration file or can set a malicious environment variable.

Remediation

Upgrade ch.qos.logback:logback-core to version 1.5.19 or higher.

References

External Initialization of Trusted Variables or Data Stores vulnerability report

medium severity

Dual license: EPL-1.0, LGPL-2.1

Module: ch.qos.logback:logback-classic
Introduced through: org.springframework.boot:spring-boot-starter-actuator@3.5.5 and org.springframework.boot:spring-boot-starter-web@3.5.5

Detailed paths

Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18

Dual license: EPL-1.0, LGPL-2.1

Dual license: EPL-1.0, LGPL-2.1 vulnerability report

medium severity

Dual license: EPL-1.0, LGPL-2.1

Module: ch.qos.logback:logback-core
Introduced through: org.springframework.boot:spring-boot-starter-actuator@3.5.5 and org.springframework.boot:spring-boot-starter-web@3.5.5

Detailed paths

Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-actuator@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18
Introduced through: alina-yur/native-spring-boot@alina-yur/native-spring-boot#00b508660df6ac7d5dcafd42f5c2d7addb879063 › org.springframework.boot:spring-boot-starter-web@3.5.5 › org.springframework.boot:spring-boot-starter-json@3.5.5 › org.springframework.boot:spring-boot-starter@3.5.5 › org.springframework.boot:spring-boot-starter-logging@3.5.5 › ch.qos.logback:logback-classic@1.5.18 › ch.qos.logback:logback-core@1.5.18

Dual license: EPL-1.0, LGPL-2.1

Dual license: EPL-1.0, LGPL-2.1 vulnerability report

Vulnerabilities

Dependencies

Source

Commit

Find, fix and prevent vulnerabilities in your code.

high severity new

Incorrect Authorization

Detailed paths

Overview

Remediation

References

medium severity new

External Initialization of Trusted Variables or Data Stores

Detailed paths

Overview

Remediation

References

medium severity

Dual license: EPL-1.0, LGPL-2.1

Detailed paths

medium severity

Dual license: EPL-1.0, LGPL-2.1

Detailed paths

high severity

new

medium severity

new