Add CVE-2021-22112 to org.springframework.security/spring-security-oauth2-jose [adbcurate]
requested to merge adbcurate/maven_org_springframework_security_spring_security_oauth2_jose_CVE_2021_22112_yml into master
Useful links
-
Mvnrepository: https://mvnrepository.com/artifact/org.springframework.security/spring-security-oauth2-jose
To be checked:
-
identifier
should be the CVE id when it exists. -
description
must not contain an overview of the package, fixed versions, affected versions, solution or links. It leverages the Markdown syntax. -
date
is the date on which the advisory was made public (or updated). -
urls
must contain URLs specific to the vulnerability, not URLs generic to the package itself. -
not_impacted
lists old versions that are not impacted, if any, the fixed versions. -
solution
tells how to remediate the vulnerability. -
title
is a short description. It does not contain the package name.