P5Verified

CVE-2022-22968 in org.springframework:spring-context - Patched by Root

CVE-2022-22968 affects org.springframework:spring-context. EPSS 0.05666 (percentile 0.9275), scored 2026-10-03. Fixed version: 5.3.14-aikido.4. Fixed version: 5.3.14-aikido.5. Fixed version: 4.0.3.RELEASE-aikido.1. Fixed version: 5.3.14-root.io.4. Fixed version: 5.3.14-root.io.5. Fixed version: 4.0.3.RELEASE-root.io.1.

Product: org.springframework:spring-context
CCR priority: 1.4 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · OSV.dev
EPSS: 0.05666 · percentile 0.9275 · 2026-10-03
KEV: no

Affected products

org.springframework:spring-context · Fixed version: 5.3.14-aikido.4
org.springframework:spring-context · Fixed version: 5.3.14-aikido.5
org.springframework:spring-context · Fixed version: 4.0.3.RELEASE-aikido.1
io.root.org.springframework:spring-context · Fixed version: 5.3.14-root.io.4
io.root.org.springframework:spring-context · Fixed version: 5.3.14-root.io.5
io.root.org.springframework:spring-context · Fixed version: 4.0.3.RELEASE-root.io.1

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2022-22968.html