Root has patched CVE-2024-22258 in the io.root.org.springframework.security:spring-security-oauth2-authorization-server package for Root:Maven. Multiple fixed versions available.
{
"distro": "maven",
"source": "Root",
"distro_version": "",
"severity": "MEDIUM"
}