ROOT-APP-MAVEN-CVE-2026-41846 CVE-2026-41846 in io.root.org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41846 in the io.root.org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2809 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41846 Source advisory: OSV:GHSA-957G-F97V-VPPC...

com.coherentlogic.coherent.data-model:data-model-core (>=1.0.15-release, <=1.0.16-release), com.coherentlogic.coherent:data-model (>=1.0.15-release, <=1.0.16-release) +155 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.0.5.release)

org.springframework:spring-webmvc MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.coherentlogic.coherent.data-model:data-model-core =1.0.15-release, =1.0.15-releas...

com.github.bluejoe2008:elfinder-servlet-2 (>=1.0, <=1.2), com.github.jknack:mwa-solr3 (0.4.0) +114 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.2.3.release)

org.springframework:spring-webmvc MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.bluejoe2008:elfinder-servlet-2 =1.0, =1.0.2, =2.9.4-sp.15, =2.9.4-sp.15,...

com.brienwheeler.web.tags:tags-blwform (>=1.0-release, <=1.11), com.brienwheeler.web.tags:tags-blwjawr (>=1.0-release, <=1.11) +138 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.2.9.release)

org.springframework:spring-webmvc MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.brienwheeler.web.tags:tags-blwform =1.0-release, =1.0-release, =1.0-release,...

am.ik.home:uaa-client (>=1.3.0, <=1.8.1), am.ik.home:uaa-integration-test (>=1.3.0, <=1.8.1) +313 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.3.6.release)

org.springframework:spring-webmvc MAVEN version 4.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =0.0.1, =0.2.0, =1.0.8, =0.1.1, =0.1.1,...

am.ik.springmvc:new-controller (>=0.1.0, <=0.2.0), br.ufc.quixada.npi:npi-core-api (0.1.0) +125 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.4.release)

org.springframework:spring-webmvc MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.springmvc:new-controller =0.1.0, =1.0.1, =0.1.0, =2.1, =0.1.5, =4.0.1,...

org.acegisecurity:acegi-security-samples-contacts (1.0.7), org.andromda.andromdapp.projects:andromda-andromdapp-project-richclient-ant (3.3) +1 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (1.2.9)

org.springframework:spring-webmvc MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security-samples-contacts 1.0.7 -...

com.mysema.web:webmin (0.2.3), org.parancoe:parancoe (0.3.3) +11 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.0.7)

org.springframework:spring-webmvc MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.mysema.web:webmin 0.2.3 - org.parancoe:parancoe 0.3.3 - org.parancoe:parancoe-core 0.3.3 ...

com.gitee.tanxianbo:mybatiscreatetable (1.0), com.pugwoo:spring-mvc-conf (0.0.6) +40 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.2.9.release)

org.springframework:spring-webmvc MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.gitee.tanxianbo:mybatiscreatetable 1.0 - com.pugwoo:spring-mvc-conf 0.0.6 -...

com.blitline:blitline-image-client-example (>=0.14.0, <=0.14.2), com.blitline:blitline-image-client-spring (>=0.14.0, <=0.14.2) +36 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.1.release)

org.springframework:spring-webmvc MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.blitline:blitline-image-client-example =0.14.0, =0.14.0, =1.3, =1.31, =1.2, =1.4,...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.kurento.kmf:kmf-broker (4.3.0) +13 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.0.1.release)

org.springframework:spring-webmvc MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =4.1.0, =4.1.0, =4.1.0, =4.1.0,...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), capital.scalable:spring-auto-restdocs-core (>=1.0.14, <=1.0.15) +128 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.3.15.release)

org.springframework:spring-webmvc MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ai.foremast.metrics:foremast-spring-4x-k8s-metrics =0.1.6, =1.0.14, =1.0.20, =1.0.6,...

com.54chen:paoding-rose (1.0), com.54chen:paoding-rose-portal (1.0) +14 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.5.6.sec02)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.54chen:paoding-rose 1.0 - com.54chen:paoding-rose-portal 1.0 -...

at.researchstudio.sat:won-node (>=0.4, <=0.6), at.researchstudio.sat:won-node-webapp (>=0.4, <=0.6) +716 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.3.18.release)

org.springframework:spring-webmvc MAVEN version 4.3.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.researchstudio.sat:won-node =0.4, =0.4, =0.4, =0.4, =3.5.19, =3.5.19, =1.5.14,...

ch.ralscha:extdirectspring (1.5.0), cn.enilu:flash-generator (1.0) +20 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.2.release)

org.springframework:spring-webmvc MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring 1.5.0 - cn.enilu:flash-generator 1.0 - cn.enilu:flash-web...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7242 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41846 Source advisory: OSV:GHSA-957G-F97V-VPPC...

ch.ralscha:extdirectspring (>=1.0.12, <=1.0.13), com.github.enpassant:ickenham-spring-mvc_2.11 (>=1.0.0, <=1.5.0) +76 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.0.6.release)

org.springframework:spring-webmvc MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.0.12, =1.0.0, =1.0.0, =1.0.10, =0.1, =1.0,...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +19563 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-41846 Source advisory: GHSA-957G-F97V-VPPC...

com.github.edgar615:spring-boot-util-jwt (>=0.0.1, <=0.0.2), com.github.edgar615:spring-boot-util-web (>=0.1.0, <=0.1.3) +160 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.2.8.release)

org.springframework:spring-webmvc MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.edgar615:spring-boot-util-jwt =0.0.1, =0.1.0, =2.0, =2.0.0, =3.0.0-rc.26,...