{"schemaVersion":3,"id":"CVE-2025-22233","aliases":["UBUNTU-CVE-2025-22233","DEBIAN-CVE-2025-22233","CGA-268w-fww3-2pmc","CGA-4rwr-rff3-85r3","CGA-5983-c8mh-f9p2","CGA-5xhj-c839-628h","CGA-63wx-799x-v294","CGA-6g8x-wcwr-h7hp","CGA-6m8v-cqf8-g737","CGA-7mq2-fcv2-x2m9","CGA-7ph5-6gph-q7rg","CGA-7w6j-39w7-qvc2","CGA-8q23-p235-p6cv","CGA-8rp5-6776-9jr3","CGA-927j-4852-4w5v","CGA-9m2c-vg53-qxxh","CGA-fh5q-gjqh-5vjw","CGA-hg42-9797-3x85","CGA-hj6h-4cm2-hxfg","CGA-j7r6-jgpv-23jp","CGA-pm8c-q8mx-vjfq","CGA-r89j-mvjg-pcv6","CGA-v543-m2g5-mwg5","CGA-vmmq-j69j-jw32","CGA-vp9x-38ch-5vw7","CGA-w7gx-2m45-37mm","CGA-wc2w-4rxw-4m4r","CGA-xm22-x58h-fvv3","CGA-23jh-p562-f33v","CGA-29vv-c4x7-7mhf","CGA-2rxr-prph-rr77","CGA-38g3-rg7p-77mh","CGA-3cjr-rvc6-7fhv","CGA-52gv-9xv6-62w6","CGA-52rc-3fg6-c825","CGA-54cr-p84j-v6mc","CGA-627v-mxvc-pp2v","CGA-66gc-v97f-w2qq","CGA-6f97-gprr-j5v2","CGA-6w8f-w9h4-vp8x","CGA-6wgc-7vg8-fjqv","CGA-6x7f-4hj6-f9v3","CGA-72wc-hpvr-m2j6","CGA-7ccj-5rxm-hj5x","CGA-8g8j-4q96-f2fg","CGA-8hqm-4rxw-2p9x","CGA-8w6f-86p6-6c63","CGA-8w7j-mrx7-56gg","CGA-93jj-jwgp-cm2x","CGA-96rm-crg5-98mg","CGA-9crv-5wwv-24f2","CGA-9prg-m7r6-9mgj","CGA-c3j5-pf3q-4pgq","CGA-c49p-2r8q-p8p4","CGA-c4mp-7664-x7q9","CGA-f223-5xg8-949p","CGA-g737-qmfj-fvf8","CGA-gg2c-8ffw-686c","CGA-gvfg-r9w8-2g24","CGA-hp9x-jmvx-9fc7","CGA-j3g5-cq7v-q2mg","CGA-jrrr-28fj-j292","CGA-m2fw-7mm5-mgf7","CGA-m9gv-grgq-4m8h","CGA-p7px-5xfg-qqx7","GHSA-4wp7-92pw-q264","CGA-q43f-w8gg-6fhx","CGA-q95v-937p-rrhm","CGA-q9pp-3wjj-4vxh","CGA-qfm7-fqqj-jmc2","CGA-vg65-pqjm-8m73","CGA-vg83-w5w7-hjrh","CGA-vr33-jrcr-pqgw","CGA-w7wr-jvgx-3hwg","CGA-whm7-v99c-qh88","CGA-wv73-f732-chx9","CGA-wwg9-m4cj-3wcx","CGA-xh8r-pvf7-76hr","CGA-xjxr-f74j-fcc6"],"status":"published","duplicateOf":null,"title":null,"description":"CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks.\n\nAffected Spring Products and Versions\n\nSpring Framework:\n  *  6.2.0 - 6.2.6\n\n  *  6.1.0 - 6.1.19\n\n  *  6.0.0 - 6.0.27\n\n  *  5.3.0 - 5.3.42\n  *  Older, unsupported versions are also affected\n\n\n\nMitigation\n\nUsers of affected versions should upgrade to the corresponding fixed version.\n\nAffected version(s)Fix Version Availability 6.2.x\n 6.2.7\nOSS6.1.x\n 6.1.20\nOSS6.0.x\n 6.0.28\n Commercial https://enterprise.spring.io/ 5.3.x\n 5.3.43\n Commercial https://enterprise.spring.io/\nNo further mitigation steps are necessary.\n\n\nGenerally, we recommend using a dedicated model object with properties only for data binding, or using constructor binding since constructor arguments explicitly declare what to bind together with turning off setter binding through the declarativeBinding flag. See the Model Design section in the reference documentation.\n\nFor setting binding, prefer the use of allowedFields (an explicit list) over disallowedFields.\n\nCredit\n\nThis issue was responsibly reported by the TERASOLUNA Framework Development Team from NTT DATA Group Corporation.","dates":{"published":"2025-05-16T19:14:07.500Z","modified":"2025-05-17T02:37:03.191Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":3.1,"severity":"low","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":4.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":4.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":4.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":4.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":4.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.1,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00435,"percentile":0.36381,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.01799999999999996,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00417},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00407,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00407,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00407,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00407,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00407,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00435,"percentile":0.36381}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00417,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00435,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00435,"percentile":0.36381}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"chainguard","product":"apache-activemq-5.19","name":"apache-activemq-5.19","label":"apache-activemq-5.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-5.19","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-activemq-fips-5.19","name":"apache-activemq-fips-5.19","label":"apache-activemq-fips-5.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-fips-5.19","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi","purlType":"apk","versions":[{"text":"< 2.4.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-compat","name":"apache-nifi-compat","label":"apache-nifi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-compat","purlType":"apk","versions":[{"text":"< 2.4.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-registry","name":"apache-nifi-registry","label":"apache-nifi-registry","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-registry","purlType":"apk","versions":[{"text":"< 2.4.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-registry-toolkit","name":"apache-nifi-registry-toolkit","label":"apache-nifi-registry-toolkit","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-registry-toolkit","purlType":"apk","versions":[{"text":"< 2.4.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-toolkit","name":"apache-nifi-toolkit","label":"apache-nifi-toolkit","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-toolkit","purlType":"apk","versions":[{"text":"< 2.4.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.6","name":"camunda-zeebe-8.6","label":"camunda-zeebe-8.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.6","purlType":"apk","versions":[{"text":"< 8.6.18-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.6.18-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.6-compat","name":"camunda-zeebe-8.6-compat","label":"camunda-zeebe-8.6-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.6-compat","purlType":"apk","versions":[{"text":"< 8.6.18-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.6.18-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.27","name":"geoserver-2.27","label":"geoserver-2.27","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.27","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.28","name":"geoserver-2.28","label":"geoserver-2.28","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.28","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.28-community","name":"geoserver-2.28-community","label":"geoserver-2.28-community","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.28-community","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jenkins-2.504-openjdk-17","name":"jenkins-2.504-openjdk-17","label":"jenkins-2.504-openjdk-17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jenkins-2.504-openjdk-17","purlType":"apk","versions":[{"text":"< 2.504.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.504.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jenkins-2.504-openjdk-21","name":"jenkins-2.504-openjdk-21","label":"jenkins-2.504-openjdk-21","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jenkins-2.504-openjdk-21","purlType":"apk","versions":[{"text":"< 2.504.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.504.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.0","name":"kayenta-2025.0","label":"kayenta-2025.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.1","name":"kayenta-2025.1","label":"kayenta-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.2","name":"kayenta-2025.2","label":"kayenta-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.4","name":"kayenta-2025.4","label":"kayenta-2025.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2026.0","name":"kayenta-2026.0","label":"kayenta-2026.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2026.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2026.1","name":"kayenta-2026.1","label":"kayenta-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.0","name":"kayenta-fips-2025.0","label":"kayenta-fips-2025.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.1","name":"kayenta-fips-2025.1","label":"kayenta-fips-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.2","name":"kayenta-fips-2025.2","label":"kayenta-fips-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.4","name":"kayenta-fips-2025.4","label":"kayenta-fips-2025.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2026.0","name":"kayenta-fips-2026.0","label":"kayenta-fips-2026.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2026.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2026.1","name":"kayenta-fips-2026.1","label":"kayenta-fips-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-config-cli","name":"keycloak-config-cli","label":"keycloak-config-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-config-cli","purlType":"apk","versions":[{"text":"< 6.4.0-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.0-r42","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-config-cli-compat","name":"keycloak-config-cli-compat","label":"keycloak-config-cli-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-config-cli-compat","purlType":"apk","versions":[{"text":"< 6.4.0-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.0-r42","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-config-cli-iamguarded-compat","name":"keycloak-config-cli-iamguarded-compat","label":"keycloak-config-cli-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-config-cli-iamguarded-compat","purlType":"apk","versions":[{"text":"< 6.4.0-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.0-r42","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ontop","name":"ontop","label":"ontop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ontop","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ontop-fips","name":"ontop-fips","label":"ontop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ontop-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ranger","name":"ranger","label":"ranger","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ranger","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seata-server","name":"seata-server","label":"seata-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seata-server","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard","name":"thingsboard","label":"thingsboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-js-executor","name":"thingsboard-tb-js-executor","label":"thingsboard-tb-js-executor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-js-executor","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-web-ui","name":"thingsboard-tb-web-ui","label":"thingsboard-tb-web-ui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-web-ui","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi","purlType":"apk","versions":[{"text":"< 2.4.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-compat","name":"apache-nifi-compat","label":"apache-nifi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-compat","purlType":"apk","versions":[{"text":"< 2.4.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-registry","name":"apache-nifi-registry","label":"apache-nifi-registry","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-registry","purlType":"apk","versions":[{"text":"< 2.4.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-registry-toolkit","name":"apache-nifi-registry-toolkit","label":"apache-nifi-registry-toolkit","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-registry-toolkit","purlType":"apk","versions":[{"text":"< 2.4.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-toolkit","name":"apache-nifi-toolkit","label":"apache-nifi-toolkit","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-toolkit","purlType":"apk","versions":[{"text":"< 2.4.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-config-cli","name":"keycloak-config-cli","label":"keycloak-config-cli","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-config-cli","purlType":"apk","versions":[{"text":"< 6.4.0-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.0-r42","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-config-cli-compat","name":"keycloak-config-cli-compat","label":"keycloak-config-cli-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-config-cli-compat","purlType":"apk","versions":[{"text":"< 6.4.0-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.0-r42","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-config-cli-iamguarded-compat","name":"keycloak-config-cli-iamguarded-compat","label":"keycloak-config-cli-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-config-cli-iamguarded-compat","purlType":"apk","versions":[{"text":"< 6.4.0-r42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.0-r42","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard","name":"thingsboard","label":"thingsboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-js-executor","name":"thingsboard-tb-js-executor","label":"thingsboard-tb-js-executor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-js-executor","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-web-ui","name":"thingsboard-tb-web-ui","label":"thingsboard-tb-web-ui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-web-ui","purlType":"apk","versions":[{"text":"< 4.0.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r5","eol":null,"hubHref":null},{"vendor":"debian","product":"libspring-java","name":"libspring-java","label":"libspring-java","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libspring-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libspring-java","name":"libspring-java","label":"libspring-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libspring-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.springframework","product":"spring-context","name":"org.springframework:spring-context","label":"spring-context","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework/spring-context","purlType":"maven","versions":[{"text":"≥ 6.2.0, < 6.2.7","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.1.0, < 6.1.20","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, ≤ 6.0.23","noFixRecorded":false,"fixedIn":null},{"text":"≤ 5.3.39","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.2.0, < 6.2.7 | ≥ 6.1.0, < 6.1.20 | ≥ 6.0.0, ≤ 6.0.23 | ≤ 5.3.39","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-framework","label":"Spring Framework","category":"framework"}},"hubHref":null},{"vendor":"spring","product":"spring framework","name":"Spring Framework","label":"spring framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.2.0, ≤ 6.2.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.1.0, ≤ 6.1.19","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, ≤ 6.0.27","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.3.0, ≤ 5.3.42","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.2.0, ≤ 6.2.6 | ≥ 6.1.0, ≤ 6.1.19 | ≥ 6.0.0, ≤ 6.0.27 | ≥ 5.3.0, ≤ 5.3.42","eol":null,"hubHref":"/vendor/spring/spring_framework"}],"affectedCount":55,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N&version=3.1","label":"nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N&version=3.1","hostname":"nvd.nist.gov","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-22233","label":"ubuntu.com/security/CVE-2025-22233","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-22233","label":"www.cve.org/CVERecord?id=CVE-2025-22233","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-22233","label":"security-tracker.debian.org/tracker/CVE-2025-22233","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22233","label":"nvd.nist.gov/vuln/detail/CVE-2025-22233","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/spring-projects/spring-framework/issues/34801","label":"github.com/spring-projects/spring-framework/issues/34801","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-framework/commit/edfcc6ffb188e4614ec9b212e3208b666981851c","label":"github.com/spring-projects/spring-framework/commit/edfcc6ffb188e4614ec9b212e3208b666981851c","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-framework/commit/ee62701f5634e904e42e218baad142cea2bcd332","label":"github.com/spring-projects/spring-framework/commit/ee62701f5634e904e42e218baad142cea2bcd332","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/spring-projects/spring-framework","label":"github.com/spring-projects/spring-framework","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://spring.io/security/cve-2025-22233","label":"spring.io/security/cve-2025-22233","hostname":"spring.io","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-457J-MVF7-FHJ5","CGA-6593-35FW-774P","CGA-782M-X8CV-72Q8","CGA-CWQ3-W8FH-CPJM","CGA-FHQH-95P3-6CPH","CGA-G349-GW2G-282W","CGA-P5W8-H2GX-X794","CGA-R348-W9RV-7HWC","CGA-XFQV-4WQ9-9MXH"]},"timeline":[{"kind":"published","date":"2025-05-16T19:14:07.500Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-05-17T02:37:03.191Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":12,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:10:06.976Z","stale":false,"partial":false}}