Find repositories exposed to CVE-2026-22732

Proprietary

Marks one file per repository that resolves a Spring Security version affected by CVE-2026-22732 and does not already write its security headers eagerly. Intended for the DevCenter security card, which counts changed files — one mark per repository makes that card a count of exposed repositories rather than of individual call sites.

org.openrewrite.java.security.spring.cve202622732.FindExposedRepositories

mod run . --recipe=org.openrewrite.java.security.spring.cve202622732.FindExposedRepositories

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.