Robuta

https://docs.spring.io/spring-data/elasticsearch/reference/data-commons/4.0-SNAPSHOT/api/java/org/springframework/data/web/querydsl/package-summary.html org.springframework.data.web.querydsl (Spring Data Core 4.0.6-SNAPSHOT API) declaration: package: org.springframework.data.web.querydsl data webspring core https://advisories.gitlab.com/maven/com.querydsl/querydsl-apt/CVE-2024-49203/ Querydsl vulnerable to HQL injection through orderBy | GitLab Advisory Database (GLAD) CVE-2024-49203 Querydsl vulnerable to HQL injection through orderBy: The order by method enables injecting HQL queries. This may cause blind HQL injection,... querydslvulnerablehqlinjection https://docs.spring.io/spring-data/elasticsearch/reference/data-commons/4.0-SNAPSHOT/api/java/org/springframework/data/querydsl/package-summary.html org.springframework.data.querydsl (Spring Data Core 4.0.6-SNAPSHOT API) declaration: package: org.springframework.data.querydsl spring corespringframeworkdataquerydsl https://docs.spring.io/spring-data/data-commons/docs/3.3.13/api/org/springframework/data/querydsl/package-use.html Uses of Package org.springframework.data.querydsl (Spring Data Core 3.3.13 API) use: package: org.springframework.data.querydsl https://docs.spring.io/spring-data/relational/reference/data-commons/3.5-SNAPSHOT/api/java/org/springframework/data/querydsl/binding/package-summary.html org.springframework.data.querydsl.binding (Spring Data Core 3.5.12-SNAPSHOT API) declaration: package: org.springframework.data.querydsl.binding spring core https://advisories.gitlab.com/maven/com.querydsl/querydsl-apt/GHSA-wpvf-5mc3-hv6m/ Duplicate Advisory: Querydsl SQL/HQL injection | GitLab Advisory Database (GLAD) GHSA-wpvf-5mc3-hv6m Duplicate Advisory: Querydsl SQL/HQL injection: Duplicate Advisory This advisory has been withdrawn because it is a duplicate of... duplicateadvisoryquerydslsqlhql