Find projects on an affected Spring Security series

Proprietary

Marks every source file in projects that resolve a Spring Security version in the given minor series, or in any series when none is given, and are affected by CVE-2026-22732. Intended as a precondition for a version bump, so that each project is only offered the fix released on its own series.

org.openrewrite.java.security.spring.cve202622732.FindAffectedSpringSecuritySeries

Optional

The Spring Security minor series to match, as major.minor. Matches every affected series when omitted.

mod run . --recipe=org.openrewrite.java.security.spring.cve202622732.FindAffectedSpringSecuritySeries

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.