org.springframework.boot:spring-boot-starter-data-mongodb (>=1.1.11.release, <=1.1.12.release), org.springframework.data:spring-data-mongodb-cross-store (1.5.5.release) +6 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.5.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

io.rhiot:rhiot-cloudlet-geofencing (0.1.1), io.rhiot:rhiot-iot-cloudlet-document-default (0.1.1) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.6.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - io.rhiot:rhiot-cloudlet-geofencing 0.1.1 -...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.6.1, <=5.6.3), org.springframework.amqp:spring-rabbit (1.7.12.release) +2 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.12.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.6.1, =5.6.3 -...

com.bluelock:camel-spring-amqp (1.7.0), org.springframework.amqp:spring-rabbit (1.4.3.release) +6 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.4.3.release)

org.springframework.amqp:spring-amqp MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bluelock:camel-spring-amqp 1.7.0 - org.springframework.amqp:spring-rabbit...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.4.3, <=5.5.1), org.springframework.amqp:spring-rabbit (1.7.10.release) +5 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.10.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.4.3, =5.5.1 -...

in.clouthink.daas:daas-fss-gridfs (>=3.0.5, <=3.0.7), org.springframework.boot:spring-boot-starter-data-mongodb (1.5.19.release) +2 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.18.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - in.clouthink.daas:daas-fss-gridfs =3.0.5, =1.2.13.release,...

br.jus.stf.digital:core (>=0.2.0, <=1.6.0), guru.springframework:page-view-client (0.0.2) +4 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.0.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - br.jus.stf.digital:core =0.2.0, =0.0.1, =1.5.0.release, =1.5.1.release Source...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-41694 Source advisory: OSV:GHSA-WW38-37G9-M3Q3...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-40988 Source advisory: GHSA-M69X-PW9P-7J3Q...

cve-2026-40992 - MEDIUM - Mail Auto-Configuration Does Not Enable SSL Hostname Verification

cve-2026-40992 - MEDIUM - Mail Auto-Configuration Does Not Enable SSL Hostname Verification...

Linux Distros Unpatched Vulnerability : CVE-2026-46284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or defaulthugepagesz are specified on the kernel command line...

Insecure Temporary File

Overview Affected versions of this package are vulnerable to Insecure Temporary File via the default data directory configuration in ArtemisEmbeddedConfigurationFactory. A local attacker can tamper with or redirect the embedded Artemis broker's data storage by pre-creating the predictable data...

Insecure Temporary File

Overview org.springframework.boot:spring-boot-artemis is a Affected versions of this package are vulnerable to Insecure Temporary File. via the default data directory configuration in ArtemisEmbeddedConfigurationFactory. A local attacker can tamper with or redirect the embedded Artemis broker's...

Improper Validation of Certificate with Host Mismatch

Overview org.springframework.boot:spring-boot-mail is a Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch. via missing hostname verification in the auto-configuration. An attacker can impersonate a trusted mail server and intercept or...

ai.platon.pulsar:browser4-boot (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:browser4-captcha (>=4.13.5, <=4.14.0-rc.2) +6749 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-autoconfigure (>=4.0.0-m1, <=4.0.6)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.0.0-m1, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-40992 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-17304741...

cl.kanopus.tool:ktool-pulse (>=1.0.0, <=2.1.0), cloud.lildworks.ldu.springboot:ldu-springboot-mail-sender (4.0.6.2606.0) +443 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-mail (>=4.0.0-m1, <=4.0.6)

org.springframework.boot:spring-boot-mail MAVEN version =4.0.0-m1, =1.0.0, =v2.0.0, =2.83.0, =2.79.0, =2.78.0, =2.71.0, =2.74.0, =3.33.0, =2.70.0, =2.0.0-alpha3, =1.52.0, =5.0.4, =5.0.46 - com.kleegroup.accelerator:accelerator-message-smtp 1.2.0 and more Source cves: CVE-2026-40992 Source advisor...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +14795 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-autoconfigure (>=3.4.0, <=3.5.14)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =3.4.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-40992 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-17304741...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +24896 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=3.0.0, <=3.5.14)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =3.0.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 - ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo 0.1.0 -...

ai.platon.pulsar:browser4-boot (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:browser4-captcha (>=4.13.5, <=4.14.0-rc.2) +6749 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=4.0.0-m1, <=4.0.6)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.0.0-m1, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-41001 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-17308346...

ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0, <=0.3.0) +759 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=4.1.0-m1, <=4.1.0-rc1)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.1.0-m1, =0.1.0, =0.1.0, =1.0.0-m1, =1.0.0-m1, =1.10.9, =1.10.9, =1.0.0, =1.0.2 - com.vaadin:copilot 25.2.0-beta1 - com.vaadin:hilla-endpoint 25.2.0-beta1 - com.vaadin:hilla-spring-boot-starter 25.2.0-beta1 -...