11 matches found
ROOT-APP-MAVEN-CVE-2026-41007 CVE-2026-41007 in org.springframework.hateoas:spring-hateoas - Patched by Root
Root has patched CVE-2026-41007 in the org.springframework.hateoas:spring-hateoas package for Root:Maven. Multiple fixed versions available...
Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring
Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.40 Vulnerability Details CVEID:CVE-2026-41003 DESCRIPTION: An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...
ai.apiverse:apipulse (1.0.1), app.commerce-io:spring-boot-starter-data-search-jpa (>=1.1.0-rc1, <=1.3.0) +507 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (>=1.0.0.release, <=1.5.6)
org.springframework.hateoas:spring-hateoas MAVEN version =1.0.0.release, =1.1.0-rc1, =1.0.9.release, =1.0.9.release, =1.0.9.release, =1.1.8.release, =1.1.5.release, =1.4.0, =0.0.1, =0.0.1, =2.0.1, =3.0.5 - com.backbase.oss:scdf-maven-plugin 0.2.0 and more Source cves: CVE-2026-41007 Source...
am.ik.home:uaa-client (>=1.3.0, <=1.9.0), am.ik.home:uaa-integration-test (>=1.3.0, <=1.9.0) +181 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.23.0.release)
org.springframework.hateoas:spring-hateoas MAVEN version 0.23.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =1.0.1.release,...
io.springfox:springfox-data-rest (>=2.6.0, <=2.6.1), org.apache.geode:geode-web-api (>=1.0.0-incubating, <=1.1.1) potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.21.0.release)
org.springframework.hateoas:spring-hateoas MAVEN version 0.21.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - io.springfox:springfox-data-rest =2.6.0, =1.0.0-incubating, =1.1.1...
am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +72 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.20.0.release)
org.springframework.hateoas:spring-hateoas MAVEN version 0.20.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =1, =1, =1, =1, =1,...
au.com.mountain-pass:hyperstate (>=1, <=9), cn.bestwu:data-rest (>=1.0.0.m1, <=1.0.0.m2) +72 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.19.0.release)
org.springframework.hateoas:spring-hateoas MAVEN version 0.19.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - au.com.mountain-pass:hyperstate =1, =1.0.0.m1, =1.0.0, =0.1.1,...
br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +147 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (>=2.5.0, <=2.5.2)
org.springframework.hateoas:spring-hateoas MAVEN version =2.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41007 Source advisory: OSV:GHSA-439X-6767-44CV...
CVE-2026-41007
Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3.0 through 2.3.4; 2.4.0 through 2.4.1; 2.5.0 through 2.5.2; 3.0.0 through 3.0.3...
br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +147 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (>=2.5.0, <=2.5.2)
org.springframework.hateoas:spring-hateoas MAVEN version =2.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41007 Source advisory: MEND:CVE-2026-41007...
