CVE-2026-41855

CVE-2026-41855...

org.carewebframework:org.carewebframework.jms.activemq (>=3.1.0, <=3.1.2), org.carewebframework:org.carewebframework.jms.core (>=3.1.0, <=3.1.2) +5 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.0.6.release)

org.springframework:spring-jms MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.carewebframework:org.carewebframework.jms.activemq =3.1.0, =3.1.0, =3.1.0,...

org.jboss.snowdrop:snowdrop (>=2.1.0.final, <=2.1.1.final) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec03)

org.springframework:spring-jms MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.jboss.snowdrop:snowdrop =2.1.0.final, =2.1.1.final Source cves: CVE-2026-41855 Source...

com.ahome-it:ahome-tooling-server-core (>=1.1.2-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.2-release, <=1.1.3-release) +4 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.0.release)

org.springframework:spring-jms MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.2-release, =1.1.2-release, =1.1.2-release,...

org.jboss.snowdrop:snowdrop (>=2.0.0.final, <=2.0.5.final), org.jboss.snowdrop:snowdrop-namespace (>=1.2.0.cr1, <=2.0.0.cr1) +7 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec02)

org.springframework:spring-jms MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.jboss.snowdrop:snowdrop =2.0.0.final, =1.2.0.cr1, =1.0, =0.7, =0.7, =0.8.1 -...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +1061 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=5.0.0.release, <=5.3.39)

org.springframework:spring-jms MAVEN version =5.0.0.release, =1.0.1, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =4.2.0, =4.7.0 and more Source cves: CVE-2026-41855https://vulners.com/cve/CVE-2026-4...

org.springframework.ws:spring-ws-support (>=1.5.1, <=1.5.3) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.4)

org.springframework:spring-jms MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.ws:spring-ws-support =1.5.1, =1.5.3 Source cves: CVE-2026-41855 Source advisory...

org.apache.activemq:apache-activemq (5.1.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.1)

org.springframework:spring-jms MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.activemq:apache-activemq 5.1.0 Source cves: CVE-2026-41855 Source advisory:...

com.35liuqi:summer-web-framework (1.0), com.centurylink.mdw:mdw (>=6.0.05, <=6.1.06) +228 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.9.release)

org.springframework:spring-jms MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.35liuqi:summer-web-framework 1.0 - com.centurylink.mdw:mdw =6.0.05, =6.0.05, =6.0.05,...

org.apache.servicemix.examples:org.apache.servicemix.examples.itests.tests (4.2.0), org.apache.servicemix.jbi.cluster:org.apache.servicemix.jbi.cluster.requestor (1.2.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec01)

org.springframework:spring-jms MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.servicemix.examples:org.apache.servicemix.examples.itests.tests 4.2.0 -...

com.cisco.oss.foundation.queue:queue-hornetq (1.1.0-1), com.hack23.cia:jms-broker (>=2015.12.20, <=2016.2.7) +48 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.4.release)

org.springframework:spring-jms MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.cisco.oss.foundation.queue:queue-hornetq 1.1.0-1 - com.hack23.cia:jms-broker =2015.12.2...

com.ahome-it:ahome-tooling-server-core (>=1.1.32-release, <=1.1.36-release), com.ahome-it:ahome-tooling-server-mongodb (>=1.1.32-release, <=1.1.36-release) +62 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.6.release)

org.springframework:spring-jms MAVEN version 4.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.32-release, =1.1.32-release, =1.1.32-release,...

org.apache.cxf.systests:cxf-systests-transports (>=2.1.7, <=2.1.10), org.apache.cxf.systests:cxf-systests-uncategorized (>=2.1.7, <=2.1.10) +19 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.0.8)

org.springframework:spring-jms MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports =2.1.7, =2.1.7, =2.0.10, =2.0.10, =2.0.10, =2.0.10,...

com.almis.awe:awe-annotation (>=4.0.3, <=4.1.1), com.almis.awe:awe-annotations-spring-boot-starter (>=4.0.3, <=4.1.1) +293 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.14.release)

org.springframework:spring-jms MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.almis.awe:awe-annotation =4.0.3, =4.0.3, =4.0.4, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0....

org.springframework.boot:spring-boot-starter-hornetq (1.2.0.release), org.springframework.boot:spring-boot-starter-ws (1.2.0.release) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.1.3.release)

org.springframework:spring-jms MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.boot:spring-boot-starter-hornetq 1.2.0.release -...

com.github.dnvriend:akka-persistence-query-extensions_2.11 (>=0.0.1, <=0.0.5), com.github.dnvriend:reactive-activemq_2.11 (>=0.0.3, <=0.0.25) +33 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.5.release)

org.springframework:spring-jms MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.github.dnvriend:akka-persistence-query-extensions2.11 =0.0.1, =0.0.3, =2.12.3, =2.12.3,...

org.grails:grails-core (1.3.1), org.grails:grails-crud (1.3.1) +4 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.0.2.release)

org.springframework:spring-jms MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.grails:grails-core 1.3.1 - org.grails:grails-crud 1.3.1 - org.grails:grails-gorm 1.3.1 ...

com.github.lynzabo.codegen:codegen-core (1.0-release), com.github.lynzabo.codegen:codegen-mavenplugin (1.0-release) +11 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.1.0.release)

org.springframework:spring-jms MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.github.lynzabo.codegen:codegen-core 1.0-release -...

Linux Distros Unpatched Vulnerability : CVE-2026-41855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and...

be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-amqp (2.12.0), com.almis.awe.clients:test-react (>=0.0.13, <=1.0.5) +708 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.1.0, <=6.2.18)

org.springframework:spring-jms MAVEN version =6.1.0, =0.0.13, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.12.0 and more Source cves: CVE-2026-41855 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254113...