P5Verified

CVE-2022-22970 in org.springframework:spring-beans - Patched by Root

CVE-2022-22970 affects org.springframework:spring-beans. EPSS 0.01962 (percentile 0.79642), scored 2026-10-03. Fixed version: 5.3.14-aikido.4. Fixed version: 5.3.14-aikido.2. Fixed version: 5.3.14-aikido.3. Fixed version: 5.3.14-aikido.5. Fixed version: 4.0.3.RELEASE-aikido.1. Fixed version: 5.3.14-root.io.4. Fixed version: 5.3.14-root.io.2. Fixed version: 5.3.14-root.io.3. Fixed version: 5.3.14-root.io.5. Fixed version: 4.0.3.RELEASE-root.io.1.

Product: org.springframework:spring-beans
CCR priority: 0.5 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · OSV.dev
EPSS: 0.01962 · percentile 0.79642 · 2026-10-03
KEV: no

Affected products

org.springframework:spring-beans · Fixed version: 5.3.14-aikido.4
org.springframework:spring-beans · Fixed version: 5.3.14-aikido.2
org.springframework:spring-beans · Fixed version: 5.3.14-aikido.3
org.springframework:spring-beans · Fixed version: 5.3.14-aikido.5
org.springframework:spring-beans · Fixed version: 4.0.3.RELEASE-aikido.1
io.root.org.springframework:spring-beans · Fixed version: 5.3.14-root.io.4
io.root.org.springframework:spring-beans · Fixed version: 5.3.14-root.io.2
io.root.org.springframework:spring-beans · Fixed version: 5.3.14-root.io.3
io.root.org.springframework:spring-beans · Fixed version: 5.3.14-root.io.5
io.root.org.springframework:spring-beans · Fixed version: 4.0.3.RELEASE-root.io.1

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2022-22970.html