ROOT-OS-UBUNTU-2404-CVE-2022-41848 CVE-2022-41848 in linux - Patched by Root

Root has patched CVE-2022-41848 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

Security Bulletin: Vulnerability in Spring Framework affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Spring Framework has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

ROOT-OS-DEBIAN-11-CVE-2022-41848 CVE-2022-41848 in linux - Patched by Root

Root has patched CVE-2022-41848 in the linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry, zipkin...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Regular Expression Denial of Service (ReDoS) in Spring Framework [CVE-2026-41848]

Summary IBM Watson Speech Services Cartridge is vulnerable to a Regular Expression Denial of Service ReDoS in Spring Framework CVE-2026-41848. Spring Framework is used as part of our microservices. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in spring-core jar (CVE-2026-41848)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-41848 reported for spring-core-6.2.12.jar, spring-core-6.2.18.jar . Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +20486 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (>=6.2.0, <=6.2.18)

org.springframework:spring-core MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-41848 Source advisory: GHSA-659M-PX2C-25WJ...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +20486 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (>=6.2.0, <=6.2.18)

org.springframework:spring-core MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-41848 Source advisory: OSV:GHSA-659M-PX2C-25WJ...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +9500 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (>=7.0.0, <=7.0.7)

org.springframework:spring-core MAVEN version =7.0.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2026-41848 Source advisory: OSV:GHSA-659M-PX2C-25WJ...

net.sf.dobo:dobo (1.0) potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2)

org.springframework:spring-core MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - net.sf.dobo:dobo 1.0 Source cves: CVE-2026-41848 Source advisory: OSV:GHSA-659M-PX2C-25WJ...

au.com.centrumsystems:build-pipeline-plugin (1.0), ch.ethz.origo:origo-issue-notifier (1.0) +1113 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.5)

org.springframework:spring-core MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - au.com.centrumsystems:build-pipeline-plugin 1.0 - ch.ethz.origo:origo-issue-notifier 1.0 -...

de.codecentric:jmeter-graph-maven-plugin (0.1.0), net.sourceforge.openutils:openutils-bshd5 (>=2.0.3, <=2.0.4) +62 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.5.3)

org.springframework:spring-core MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - de.codecentric:jmeter-graph-maven-plugin 0.1.0 - net.sourceforge.openutils:openutils-bshd5 =2.0.3...

net.sf.hermesftp:hermesftp (0.7), net.sf.ldaptemplate:ldaptemplate (>=1.0-rc1, <=1.0.2) +24 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (1.2.6)

org.springframework:spring-core MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - net.sf.hermesftp:hermesftp 0.7 - net.sf.ldaptemplate:ldaptemplate =1.0-rc1, =1.0.0-rc2, =1.7,...

ch.ralscha:extdirectspring (>=1.0.0, <=1.0.1), com.alexkasko.installer:maven-windows-service-installer-plugin (>=1.0.2, <=1.0.6) +264 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.0.3.release)

org.springframework:spring-core MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ch.ralscha:extdirectspring =1.0.0, =1.0.2, =4.0.0, =22.0.2-beta, =3.0.2, =1.1.0-rc2,...

com.dtflys.forest:forest-spring (1.0.0), com.garethahealy.amq6-dual-jaas-plugin:amq6-dual-jaas-plugin-parent (>=1.2.0-beta2, <=1.4.0) +569 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.2.16.release)

org.springframework:spring-core MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.dtflys.forest:forest-spring 1.0.0 -...

ca.krasnay:sqlbuilder (1.2), co.paralleluniverse:comsat-spring-boot (0.3.0) +179 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.0.8.release)

org.springframework:spring-core MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ca.krasnay:sqlbuilder 1.2 - co.paralleluniverse:comsat-spring-boot 0.3.0 -...

cn.bridgeli:master-slave-db-selector (>=0.0.1, <=0.0.2), com.avanza.astrix:astrix-spring (>=0.38.1, <=0.43.6) +254 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.1.1.release)

org.springframework:spring-core MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - cn.bridgeli:master-slave-db-selector =0.0.1, =0.38.1, =2.7.0, =0.14.0, =0.14.0, =1.0.1-1,...

am.ik.springmvc:new-controller (>=0.1.0, <=0.2.0), br.ufc.quixada.npi:npi-core-api (0.1.0) +617 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.1.4.release)

org.springframework:spring-core MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - am.ik.springmvc:new-controller =0.1.0, =0.0.1, =0.0.1, =1.0.1, =0.5.0-rc2, =0.6.0-rc1,...

ar.com.fdvs:dynamicjasper (>=5.0.9, <=5.1.0), br.com.caelum.stella:caelum-stella-boleto (>=2.1.7, <=2.2.2) +901 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.0.6.release)

org.springframework:spring-core MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ar.com.fdvs:dynamicjasper =5.0.9, =2.1.7, =20.3.0, =20.3.0, =2.23.5, =2.23.5, =18.4.0,...

ch.hsr.mas.oms-financialanalyzer:indicators (1.2.0), ch.hsr.mas.oms-financialanalyzer:oms-api (1.2.0) +521 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.1.1.release)

org.springframework:spring-core MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ch.hsr.mas.oms-financialanalyzer:indicators 1.2.0 -...