Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-cpsj-4k25-wufe
Summary
Improper Privilege Management in Spring Framework
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.
Aliases
0
alias CVE-2021-22118
1
alias GHSA-gfwj-fwqj-fp3v
Fixed_packages
0
url pkg:deb/debian/libspring-java@0?distro=trixie
purl pkg:deb/debian/libspring-java@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@0%3Fdistro=trixie
1
url pkg:deb/debian/libspring-java@4.3.30-1?distro=trixie
purl pkg:deb/debian/libspring-java@4.3.30-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@4.3.30-1%3Fdistro=trixie
2
url pkg:deb/debian/libspring-java@4.3.30-2?distro=trixie
purl pkg:deb/debian/libspring-java@4.3.30-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@4.3.30-2%3Fdistro=trixie
3
url pkg:deb/debian/libspring-java@4.3.30-3?distro=trixie
purl pkg:deb/debian/libspring-java@4.3.30-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@4.3.30-3%3Fdistro=trixie
4
url pkg:deb/debian/libspring-java@4.3.30-4?distro=trixie
purl pkg:deb/debian/libspring-java@4.3.30-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@4.3.30-4%3Fdistro=trixie
5
url pkg:maven/org.springframework/spring-core@5.2.14.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.14.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cyjt-4vjn-mbc7
3
vulnerability VCID-dy4t-tm9m-rfex
4
vulnerability VCID-k17s-ttg2-ubgj
5
vulnerability VCID-w6br-v2gm-j7gr
6
vulnerability VCID-ygpk-fb56-sqa4
7
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.14.RELEASE
6
url pkg:maven/org.springframework/spring-core@5.3.7
purl pkg:maven/org.springframework/spring-core@5.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cyjt-4vjn-mbc7
3
vulnerability VCID-dy4t-tm9m-rfex
4
vulnerability VCID-k17s-ttg2-ubgj
5
vulnerability VCID-k2en-h5n1-r7gr
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-ygpk-fb56-sqa4
8
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.7
7
url pkg:maven/org.springframework/spring-web@5.3.7
purl pkg:maven/org.springframework/spring-web@5.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ng1-3a32-cugs
1
vulnerability VCID-kpma-e8rd-b7c8
2
vulnerability VCID-x5w8-j62d-m7h6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.3.7
8
url pkg:maven/org.springframework/spring-webflux@5.2.15.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.15.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.15.RELEASE
9
url pkg:maven/org.springframework/spring-webflux@5.3.7
purl pkg:maven/org.springframework/spring-webflux@5.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.7
Affected_packages
0
url pkg:maven/org.springframework/spring-core@5.2.0
purl pkg:maven/org.springframework/spring-core@5.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-dy4t-tm9m-rfex
2
vulnerability VCID-vvyu-uk8r-wuaz
3
vulnerability VCID-y3uz-etva-sufh
4
vulnerability VCID-ygpk-fb56-sqa4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.0
1
url pkg:maven/org.springframework/spring-core@5.2.0.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-y3uz-etva-sufh
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.0.RELEASE
2
url pkg:maven/org.springframework/spring-core@5.2.1.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-y3uz-etva-sufh
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.1.RELEASE
3
url pkg:maven/org.springframework/spring-core@5.2.2.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-y3uz-etva-sufh
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.2.RELEASE
4
url pkg:maven/org.springframework/spring-core@5.2.3.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-y3uz-etva-sufh
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.3.RELEASE
5
url pkg:maven/org.springframework/spring-core@5.2.4.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-y3uz-etva-sufh
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.4.RELEASE
6
url pkg:maven/org.springframework/spring-core@5.2.5.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-y3uz-etva-sufh
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.5.RELEASE
7
url pkg:maven/org.springframework/spring-core@5.2.6.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.6.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-y3uz-etva-sufh
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.6.RELEASE
8
url pkg:maven/org.springframework/spring-core@5.2.7.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.7.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-y3uz-etva-sufh
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.7.RELEASE
9
url pkg:maven/org.springframework/spring-core@5.2.8.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.8.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-ygpk-fb56-sqa4
8
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.8.RELEASE
10
url pkg:maven/org.springframework/spring-core@5.2.9.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.9.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-ygpk-fb56-sqa4
8
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.9.RELEASE
11
url pkg:maven/org.springframework/spring-core@5.2.10.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.10.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-ygpk-fb56-sqa4
8
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.10.RELEASE
12
url pkg:maven/org.springframework/spring-core@5.2.11.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.11.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-ygpk-fb56-sqa4
8
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.11.RELEASE
13
url pkg:maven/org.springframework/spring-core@5.2.12.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.12.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-ygpk-fb56-sqa4
8
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.12.RELEASE
14
url pkg:maven/org.springframework/spring-core@5.2.13.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.13.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-w6br-v2gm-j7gr
7
vulnerability VCID-ygpk-fb56-sqa4
8
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.13.RELEASE
15
url pkg:maven/org.springframework/spring-core@5.2.14
purl pkg:maven/org.springframework/spring-core@5.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.14
16
url pkg:maven/org.springframework/spring-core@5.3.0
purl pkg:maven/org.springframework/spring-core@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-k2en-h5n1-r7gr
7
vulnerability VCID-vvyu-uk8r-wuaz
8
vulnerability VCID-w6br-v2gm-j7gr
9
vulnerability VCID-ygpk-fb56-sqa4
10
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.0
17
url pkg:maven/org.springframework/spring-core@5.3.1
purl pkg:maven/org.springframework/spring-core@5.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-k2en-h5n1-r7gr
7
vulnerability VCID-w6br-v2gm-j7gr
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.1
18
url pkg:maven/org.springframework/spring-core@5.3.2
purl pkg:maven/org.springframework/spring-core@5.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-k2en-h5n1-r7gr
7
vulnerability VCID-w6br-v2gm-j7gr
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.2
19
url pkg:maven/org.springframework/spring-core@5.3.3
purl pkg:maven/org.springframework/spring-core@5.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-k2en-h5n1-r7gr
7
vulnerability VCID-w6br-v2gm-j7gr
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.3
20
url pkg:maven/org.springframework/spring-core@5.3.4
purl pkg:maven/org.springframework/spring-core@5.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-k2en-h5n1-r7gr
7
vulnerability VCID-w6br-v2gm-j7gr
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.4
21
url pkg:maven/org.springframework/spring-core@5.3.5
purl pkg:maven/org.springframework/spring-core@5.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-k2en-h5n1-r7gr
7
vulnerability VCID-w6br-v2gm-j7gr
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.5
22
url pkg:maven/org.springframework/spring-core@5.3.6
purl pkg:maven/org.springframework/spring-core@5.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ysx-5wcw-f7b5
1
vulnerability VCID-c74k-e1me-pfb2
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-cyjt-4vjn-mbc7
4
vulnerability VCID-dy4t-tm9m-rfex
5
vulnerability VCID-k17s-ttg2-ubgj
6
vulnerability VCID-k2en-h5n1-r7gr
7
vulnerability VCID-w6br-v2gm-j7gr
8
vulnerability VCID-ygpk-fb56-sqa4
9
vulnerability VCID-z3th-j593-m7bg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.6
23
url pkg:maven/org.springframework/spring-web@5.2.0
purl pkg:maven/org.springframework/spring-web@5.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-u7kk-c6fm-judy
2
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.2.0
24
url pkg:maven/org.springframework/spring-web@5.2.14
purl pkg:maven/org.springframework/spring-web@5.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.2.14
25
url pkg:maven/org.springframework/spring-web@5.3.0
purl pkg:maven/org.springframework/spring-web@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2syk-pe22-f7cd
1
vulnerability VCID-5ng1-3a32-cugs
2
vulnerability VCID-cpsj-4k25-wufe
3
vulnerability VCID-kpma-e8rd-b7c8
4
vulnerability VCID-x5w8-j62d-m7h6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.3.0
26
url pkg:maven/org.springframework/spring-web@5.3.6
purl pkg:maven/org.springframework/spring-web@5.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ng1-3a32-cugs
1
vulnerability VCID-cpsj-4k25-wufe
2
vulnerability VCID-kpma-e8rd-b7c8
3
vulnerability VCID-x5w8-j62d-m7h6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.3.6
27
url pkg:maven/org.springframework/spring-webflux@5.2.0
purl pkg:maven/org.springframework/spring-webflux@5.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-u7kk-c6fm-judy
2
vulnerability VCID-vac6-v6g7-a7e3
3
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.0
28
url pkg:maven/org.springframework/spring-webflux@5.2.0.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
2
vulnerability VCID-u7kk-c6fm-judy
3
vulnerability VCID-vac6-v6g7-a7e3
4
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.0.RELEASE
29
url pkg:maven/org.springframework/spring-webflux@5.2.1.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
2
vulnerability VCID-u7kk-c6fm-judy
3
vulnerability VCID-vac6-v6g7-a7e3
4
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.1.RELEASE
30
url pkg:maven/org.springframework/spring-webflux@5.2.2.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
2
vulnerability VCID-u7kk-c6fm-judy
3
vulnerability VCID-vac6-v6g7-a7e3
4
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.2.RELEASE
31
url pkg:maven/org.springframework/spring-webflux@5.2.3.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
2
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.3.RELEASE
32
url pkg:maven/org.springframework/spring-webflux@5.2.4.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
2
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.4.RELEASE
33
url pkg:maven/org.springframework/spring-webflux@5.2.5.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
2
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.5.RELEASE
34
url pkg:maven/org.springframework/spring-webflux@5.2.6.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.6.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
2
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.6.RELEASE
35
url pkg:maven/org.springframework/spring-webflux@5.2.7.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.7.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
2
vulnerability VCID-y3uz-etva-sufh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.7.RELEASE
36
url pkg:maven/org.springframework/spring-webflux@5.2.8.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.8.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.8.RELEASE
37
url pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE
38
url pkg:maven/org.springframework/spring-webflux@5.2.10.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.10.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.10.RELEASE
39
url pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE
40
url pkg:maven/org.springframework/spring-webflux@5.2.12.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.12.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.12.RELEASE
41
url pkg:maven/org.springframework/spring-webflux@5.2.13.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.13.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.13.RELEASE
42
url pkg:maven/org.springframework/spring-webflux@5.2.14.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.14.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.14.RELEASE
43
url pkg:maven/org.springframework/spring-webflux@5.3.0
purl pkg:maven/org.springframework/spring-webflux@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-85dj-ems3-vyh4
1
vulnerability VCID-cpsj-4k25-wufe
2
vulnerability VCID-cyjt-4vjn-mbc7
3
vulnerability VCID-gxnm-rk3x-zkdw
4
vulnerability VCID-sh22-dem5-aqf3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.0
44
url pkg:maven/org.springframework/spring-webflux@5.3.1
purl pkg:maven/org.springframework/spring-webflux@5.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.1
45
url pkg:maven/org.springframework/spring-webflux@5.3.2
purl pkg:maven/org.springframework/spring-webflux@5.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.2
46
url pkg:maven/org.springframework/spring-webflux@5.3.3
purl pkg:maven/org.springframework/spring-webflux@5.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.3
47
url pkg:maven/org.springframework/spring-webflux@5.3.4
purl pkg:maven/org.springframework/spring-webflux@5.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.4
48
url pkg:maven/org.springframework/spring-webflux@5.3.5
purl pkg:maven/org.springframework/spring-webflux@5.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.5
49
url pkg:maven/org.springframework/spring-webflux@5.3.6
purl pkg:maven/org.springframework/spring-webflux@5.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cpsj-4k25-wufe
1
vulnerability VCID-cyjt-4vjn-mbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.6
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22118.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22118.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22118
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48587
published_at 2026-05-14T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.4851
published_at 2026-05-12T12:55:00Z
2
value 0.00253
scoring_system epss
scoring_elements 0.48481
published_at 2026-05-11T12:55:00Z
3
value 0.00253
scoring_system epss
scoring_elements 0.48536
published_at 2026-05-09T12:55:00Z
4
value 0.00253
scoring_system epss
scoring_elements 0.48511
published_at 2026-05-07T12:55:00Z
5
value 0.00253
scoring_system epss
scoring_elements 0.48449
published_at 2026-05-05T12:55:00Z
6
value 0.00253
scoring_system epss
scoring_elements 0.48534
published_at 2026-04-29T12:55:00Z
7
value 0.00253
scoring_system epss
scoring_elements 0.48586
published_at 2026-04-26T12:55:00Z
8
value 0.00253
scoring_system epss
scoring_elements 0.48574
published_at 2026-04-24T12:55:00Z
9
value 0.00253
scoring_system epss
scoring_elements 0.4859
published_at 2026-04-21T12:55:00Z
10
value 0.00253
scoring_system epss
scoring_elements 0.48585
published_at 2026-04-08T12:55:00Z
11
value 0.00253
scoring_system epss
scoring_elements 0.48531
published_at 2026-04-07T12:55:00Z
12
value 0.00253
scoring_system epss
scoring_elements 0.48579
published_at 2026-04-04T12:55:00Z
13
value 0.00253
scoring_system epss
scoring_elements 0.48555
published_at 2026-04-02T12:55:00Z
14
value 0.00253
scoring_system epss
scoring_elements 0.4852
published_at 2026-04-01T12:55:00Z
15
value 0.00253
scoring_system epss
scoring_elements 0.48633
published_at 2026-04-18T12:55:00Z
16
value 0.00253
scoring_system epss
scoring_elements 0.48637
published_at 2026-04-16T12:55:00Z
17
value 0.00253
scoring_system epss
scoring_elements 0.48588
published_at 2026-04-13T12:55:00Z
18
value 0.00253
scoring_system epss
scoring_elements 0.48575
published_at 2026-04-12T12:55:00Z
19
value 0.00253
scoring_system epss
scoring_elements 0.48602
published_at 2026-04-11T12:55:00Z
20
value 0.00253
scoring_system epss
scoring_elements 0.48581
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22118
2
reference_url https://github.com/spring-projects/spring-framework
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-projects/spring-framework
3
reference_url https://github.com/spring-projects/spring-framework/commit/0d0d75e25322d8161002d861fff3ec04ba8be5ac
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-projects/spring-framework/commit/0d0d75e25322d8161002d861fff3ec04ba8be5ac
4
reference_url https://github.com/spring-projects/spring-framework/commit/cce60c479c22101f24b2b4abebb6d79440b120d1
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-projects/spring-framework/commit/cce60c479c22101f24b2b4abebb6d79440b120d1
5
reference_url https://github.com/spring-projects/spring-framework/issues/26931
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-projects/spring-framework/issues/26931
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22118
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-22118
7
reference_url https://security.netapp.com/advisory/ntap-20210713-0005
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210713-0005
8
reference_url https://security.netapp.com/advisory/ntap-20210713-0005/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20210713-0005/
9
reference_url https://spring.io/security/cve-2021-22118
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://spring.io/security/cve-2021-22118
10
reference_url https://tanzu.vmware.com/security/cve-2021-22118
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://tanzu.vmware.com/security/cve-2021-22118
11
reference_url https://www.oracle.com/security-alerts/cpuapr2022.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuapr2022.html
12
reference_url https://www.oracle.com/security-alerts/cpujan2022.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujan2022.html
13
reference_url https://www.oracle.com//security-alerts/cpujul2021.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com//security-alerts/cpujul2021.html
14
reference_url https://www.oracle.com/security-alerts/cpujul2022.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujul2022.html
15
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2021.html
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1974854
reference_id 1974854
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1974854
17
reference_url https://github.com/advisories/GHSA-gfwj-fwqj-fp3v
reference_id GHSA-gfwj-fwqj-fp3v
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gfwj-fwqj-fp3v
18
reference_url https://access.redhat.com/errata/RHSA-2021:3205
reference_id RHSA-2021:3205
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3205
19
reference_url https://access.redhat.com/errata/RHSA-2021:4918
reference_id RHSA-2021:4918
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4918
20
reference_url https://access.redhat.com/errata/RHSA-2021:5134
reference_id RHSA-2021:5134
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5134
Weaknesses
0
cwe_id 269
name Improper Privilege Management
description The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
1
cwe_id 668
name Exposure of Resource to Wrong Sphere
description The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
2
cwe_id 281
name Improper Preservation of Permissions
description The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
4
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-cpsj-4k25-wufe