Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/4834?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4834?format=api", "vulnerability_id": "VCID-s8a4-9j7s-8fc8", "summary": "Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.", "aliases": [ { "alias": "CVE-2018-1273" }, { "alias": "GHSA-4fq3-mr56-cg6r" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/27492?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@2.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-t38y-1dv8-b7av" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@2.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/169342?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.11.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.11.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169352?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.11.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-92mk-6xrd-gbaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.11.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/27481?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.6.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-92mk-6xrd-gbaa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.6.RELEASE" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/27490?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/160872?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.1.0-incubating", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.1.0-incubating" }, { "url": "http://public2.vulnerablecode.io/api/packages/160873?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.2.0-incubating", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.2.0-incubating" }, { "url": "http://public2.vulnerablecode.io/api/packages/160874?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.3.0-incubating", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.3.0-incubating" }, { "url": "http://public2.vulnerablecode.io/api/packages/160875?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/160876?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.5.0-b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.5.0-b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/160877?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.5.0.final", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.5.0.final" }, { "url": "http://public2.vulnerablecode.io/api/packages/160878?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/160879?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.7.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/160880?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.8.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-66b8-a5kh-yfhw" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.8.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/24020?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@1.9.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@1.9.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/169250?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16c2-gkg9-qbaj" }, { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/169251?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@2.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-kxtv-ma18-8fer" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@2.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/169252?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@2.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@2.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/27400?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@2.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-8xff-d5ab-bqgf" }, { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@2.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/27402?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@2.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@2.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/27491?format=api", "purl": "pkg:maven/org.apache.ignite/ignite-core@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-d6hk-e64u-tbcj" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" }, { "vulnerability": "VCID-ykug-1dhq-tygt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.ignite/ignite-core@2.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/169298?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.5.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.5.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169299?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.5.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.5.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169300?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.5.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.5.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169301?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.5.3.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.5.3.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169302?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.6.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.6.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169303?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.6.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.6.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169304?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.6.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.6.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169305?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.6.3.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.6.3.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169306?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.6.4.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.6.4.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169307?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.6.5.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.6.5.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169308?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.7.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.7.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169309?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.7.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.7.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169310?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.7.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.7.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169311?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.7.3.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.7.3.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169312?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.8.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.8.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169313?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.8.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.8.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169314?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.8.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.8.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169315?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.8.4.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.8.4.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169316?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.8.5.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.8.5.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169317?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.8.6.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.8.6.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169318?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.9.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.9.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169319?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.9.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.9.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169320?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.9.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.9.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169321?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.9.3.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.9.3.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169322?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.9.4.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.9.4.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169323?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.10.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.10.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169324?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.10.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.10.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169325?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.10.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.10.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169326?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.11.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.11.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169327?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.11.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.11.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169328?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.11.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.11.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169329?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.11.4.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.11.4.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169330?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.11.5.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.11.5.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169331?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.11.6.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.11.6.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169332?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169333?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169334?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169335?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.3.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.3.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169336?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.4.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.4.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169337?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.5.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.5.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169338?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.6.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.6.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169339?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.7.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.7.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169340?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.8.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.8.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169341?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.9.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.9.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/27476?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.12.10.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.12.10.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/31840?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/27477?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/27552?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169343?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169344?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169345?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.3.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.3.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169346?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.4.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.4.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169347?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.5.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.5.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169348?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.6.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.6.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169349?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.7.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.7.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169350?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.8.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.8.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169351?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.9.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.9.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/27478?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@1.13.10.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@1.13.10.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/31842?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/27479?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/27553?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.0.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169353?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.1.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.1.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169354?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.2.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169355?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.3.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.3.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/169356?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.4.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.4.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/27480?format=api", "purl": "pkg:maven/org.springframework.data/spring-data-commons@2.0.5.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-81j5-6v3h-v3cq" }, { "vulnerability": "VCID-92mk-6xrd-gbaa" }, { "vulnerability": "VCID-s8a4-9j7s-8fc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.data/spring-data-commons@2.0.5.RELEASE" } ], "references": [ { "reference_url": "http://mail-archives.apache.org/mod_mbox/ignite-dev/201807.mbox/%3CCAK0qHnqzfzmCDFFi6c5Jok19zNkVCz5Xb4sU%3D0f2J_1i4p46zQ%40mail.gmail.com%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T12:41:40Z/" } ], "url": "http://mail-archives.apache.org/mod_mbox/ignite-dev/201807.mbox/%3CCAK0qHnqzfzmCDFFi6c5Jok19zNkVCz5Xb4sU%3D0f2J_1i4p46zQ%40mail.gmail.com%3E" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1273.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1273.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1273", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.94288", "scoring_system": "epss", "scoring_elements": "0.9994", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.94288", "scoring_system": "epss", "scoring_elements": "0.99941", "published_at": "2026-04-24T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-1273" }, { "reference_url": "https://github.com/advisories/GHSA-4fq3-mr56-cg6r", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4fq3-mr56-cg6r" }, { "reference_url": "https://github.com/spring-projects/spring-data-commons", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/spring-projects/spring-data-commons" }, { "reference_url": "https://github.com/spring-projects/spring-data-commons/commit/ae1dd2741ce06d44a0966ecbd6f47beabde2b65", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-data-commons/commit/ae1dd2741ce06d44a0966ecbd6f47beabde2b65" }, { "reference_url": "https://github.com/spring-projects/spring-data-commons/commit/ae1dd2741ce06d44a0966ecbd6f47beabde2b653", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/spring-projects/spring-data-commons/commit/ae1dd2741ce06d44a0966ecbd6f47beabde2b653" }, { "reference_url": "https://github.com/spring-projects/spring-data-commons/commit/b1a20ae1e82a63f99b3afc6f2aaedb3bf4dc432", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-data-commons/commit/b1a20ae1e82a63f99b3afc6f2aaedb3bf4dc432" }, { "reference_url": "https://github.com/spring-projects/spring-data-commons/commit/b1a20ae1e82a63f99b3afc6f2aaedb3bf4dc432a", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/spring-projects/spring-data-commons/commit/b1a20ae1e82a63f99b3afc6f2aaedb3bf4dc432a" }, { "reference_url": "https://github.com/spring-projects/spring-data-commons/issues/1721", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/spring-projects/spring-data-commons/issues/1721" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujul2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T12:41:40Z/" } ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1565923", "reference_id": "1565923", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1565923" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1273", "reference_id": "CVE-2018-1273", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1273" }, { "reference_url": "https://pivotal.io/security/cve-2018-1273", "reference_id": "CVE-2018-1273", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Act", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T12:41:40Z/" } ], "url": "https://pivotal.io/security/cve-2018-1273" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 20, "name": "Improper Input Validation", "description": "The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 94, "name": "Improper Control of Generation of Code ('Code Injection')", "description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment." }, { "cwe_id": 138, "name": "Improper Neutralization of Special Elements", "description": "The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as control elements or syntactic markers when they are sent to a downstream component." } ], "exploits": [ { "date_added": "2022-03-25", "description": "Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.", "required_action": "Apply updates per vendor instructions.", "due_date": "2022-04-15", "notes": "https://nvd.nist.gov/vuln/detail/CVE-2018-1273", "known_ransomware_campaign_use": true, "source_date_published": null, "exploit_type": null, "platform": null, "source_date_updated": null, "data_source": "KEV", "source_url": null } ], "severity_range_score": "9.0 - 10.0", "exploitability": "2.0", "weighted_severity": "9.0", "risk_score": 10.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s8a4-9j7s-8fc8" }