CVE-2026-41843 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

CVE-2026-41843 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda, camunda-zeebe, kafbat-ui-fips, apache-activemq, apache-nifi-registry, kafbat-ui...

Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-webmvc jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846 reported for spring-webmvc-6.2.12.jar and spring-webmvc-6.2.18.jar. Vulnerability Details CVEID:CVE-2026-41841 DESCRIPTION: Spring MVC and...

capital.scalable:spring-auto-restdocs-core (>=1.0.10, <=1.0.13), cc.catalysts.boot:cat-boot-thymeleaf (>=0.2.13, <=0.2.28) +549 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.11.release)

org.springframework:spring-webmvc MAVEN version 4.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - capital.scalable:spring-auto-restdocs-core =1.0.10, =0.2.13, =1.0.5, =1.0.0, =1.0.0,...

com.17jee:e-cloud-authorize (>=3.0.0, <=3.0.1.1), com.17jee:e-security-jwt (3.0.0.release) +155 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.0.9.release)

org.springframework:spring-webmvc MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.17jee:e-cloud-authorize =3.0.0, =1.0.24-release, =1.0.22-release, =1.0.18-release...

net.sourceforge.openutils:openutils-bshd5 (0.1), net.sourceforge.openutils:openutils-spring (0.1) +11 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (1.2.6)

org.springframework:spring-webmvc MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.openutils:openutils-bshd5 0.1 - net.sourceforge.openutils:openutils-spring 0....

com.cognifide.aet:cleaner (>=2.0.0-rc2, <=2.1.6), com.cognifide.aet:communication (>=2.0.0-rc2, <=2.1.6) +189 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.1.9.release)

org.springframework:spring-webmvc MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cognifide.aet:cleaner =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1,...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +324 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.2.5.release)

org.springframework:spring-webmvc MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-app-rt (>=1.20-rc1, <=1.31) +15 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.0.2.release)

org.springframework:spring-webmvc MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20-rc1, =1.6, =1.6, =1.6, =1.1.1,...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1) +474 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.16.release)

org.springframework:spring-webmvc MAVEN version 4.3.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1.release,...

com.github.inspektr:inspektr-support-spring (1.0.0.ga), org.jasig.cas3.extensions:clearpass-impl (>=1.0.1.ga, <=1.0.5.ga) +25 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.0.1.release)

org.springframework:spring-webmvc MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.inspektr:inspektr-support-spring 1.0.0.ga -...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), ch.ralscha:extdirectspring (1.3.9) +54 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.2.5.release)

org.springframework:spring-webmvc MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =0.4.1, =0.4.1, =0.4.1, =1.0.0, =0.3.0, =2.0.0,...

ar.com.jmfsg:api-doc (>=0.0.28, <=0.0.34), ch.ralscha:extdirectspring (>=1.3.2, <=1.3.5) +102 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.2.2.release)

org.springframework:spring-webmvc MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ar.com.jmfsg:api-doc =0.0.28, =1.3.2, =1.0.5-release, =0.9.12, =0.9.12, =0.9.12,...

com.gitee.tanxianbo:mybatiscreatetable (1.0), com.pugwoo:spring-mvc-conf (0.0.6) +40 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.2.9.release)

org.springframework:spring-webmvc MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.gitee.tanxianbo:mybatiscreatetable 1.0 - com.pugwoo:spring-mvc-conf 0.0.6 -...

com.54chen:paoding-rose (1.0), com.54chen:paoding-rose-portal (1.0) +14 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.5.6.sec02)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.54chen:paoding-rose 1.0 - com.54chen:paoding-rose-portal 1.0 -...

cn.home1:oss-admin (>=1.0.6.oss, <=1.0.7.oss), cn.home1:oss-configserver (>=1.0.6.oss, <=1.0.7.oss) +917 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.3.release)

org.springframework:spring-webmvc MAVEN version 4.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.home1:oss-admin =1.0.6.oss, =1.0.6.oss, =1.0.6.oss, =1.0.7.oss, =1.0.7.oss,...

au.com.mountain-pass:hyperstate (>=1, <=3), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4) +277 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.2.4.release)

org.springframework:spring-webmvc MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =11.0.0, =1.1.5-7, =0.1.0, =1.0.0.releas...

am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +280 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.5.release)

org.springframework:spring-webmvc MAVEN version 4.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =0.0.25, =1.3.1, =0.0.25, =0.0.25,...

org.springmodules:spring-modules-jakarta-commons (>=0.8, <=0.8a), org.springmodules:spring-modules-osworkflow (>=0.8, <=0.8a) potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.0.3)

org.springframework:spring-webmvc MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons =0.8, =0.8, =0.8a Source cves: CVE-2026-4184...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41843 Source advisory: OSV:GHSA-72PG-X5F8-J25J...