P4Verified

CVE-2022-22965 in org.springframework:spring-beans - Patched by Root

CVE-2022-22965 affects org.springframework:spring-beans. EPSS 0.99638 (percentile 0.99949), scored 2026-10-03. Fixed version: 5.3.14-aikido.4. Fixed version: 5.3.14-aikido.2. Fixed version: 5.3.14-aikido.3. Fixed version: 5.3.14-aikido.5. Fixed version: 4.0.3.RELEASE-aikido.1. Fixed version: 5.3.14-root.io.4. Fixed version: 5.3.14-root.io.2. Fixed version: 5.3.14-root.io.3. Fixed version: 5.3.14-root.io.5. Fixed version: 4.0.3.RELEASE-root.io.1.

Product: org.springframework:spring-beans
CCR priority: 24.9 /100 (P4)
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H · OSV.dev
EPSS: 0.99638 · percentile 0.99949 · 2026-10-03
KEV: no

Affected products

org.springframework:spring-beans · Fixed version: 5.3.14-aikido.4
org.springframework:spring-beans · Fixed version: 5.3.14-aikido.2
org.springframework:spring-beans · Fixed version: 5.3.14-aikido.3
org.springframework:spring-beans · Fixed version: 5.3.14-aikido.5
org.springframework:spring-webmvc · Fixed version: 4.0.3.RELEASE-aikido.1
io.root.org.springframework:spring-beans · Fixed version: 5.3.14-root.io.4
io.root.org.springframework:spring-beans · Fixed version: 5.3.14-root.io.2
io.root.org.springframework:spring-beans · Fixed version: 5.3.14-root.io.3
io.root.org.springframework:spring-beans · Fixed version: 5.3.14-root.io.5
io.root.org.springframework:spring-webmvc · Fixed version: 4.0.3.RELEASE-root.io.1

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2022-22965.html