ROOT-APP-MAVEN-CVE-2026-47884 CVE-2026-47884 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-47884 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

CVE-2026-47884

creationtimestamp| type| source ---|---|--- 2026-09-10 15:39:22+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mv6f4sf3wa27 2026-10-12 09:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mxo5qc55fh27...

org.apache.rya:rya.export.accumulo (>=4.0.0-incubating, <=4.0.1), org.apache.rya:rya.indexing.example (>=4.0.0-incubating, <=4.0.1) +30 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.2.15.release)

org.springframework:spring-webmvc MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.rya:rya.export.accumulo =4.0.0-incubating, =4.0.0-incubating,...

com.cognifide.aet:cleaner (>=2.0.0-rc2, <=2.1.6), com.cognifide.aet:communication (>=2.0.0-rc2, <=2.1.6) +189 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.1.9.release)

org.springframework:spring-webmvc MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cognifide.aet:cleaner =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1,...

cn.bestwu:fastjson (>=1.1-unwrap, <=1.2-unwrap), co.paralleluniverse:comsat-spring-boot (0.6.0) +300 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.2.3.release)

org.springframework:spring-webmvc MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.bestwu:fastjson =1.1-unwrap, =3.5, =1.2.6, =3.0.0-0, =2.5, =2.5, =2.5, =2.6 -...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.1), com.bnd-lib:bnd-chemistry (0.7.0) +59 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.2.0.release)

org.springframework:spring-webmvc MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1 - com.bnd-lib:bnd-chemistry 0.7.0 -...

com.ctlok:spring-webmvc-rythm (>=1.3.6, <=1.4.2), com.googlecode.struts2-conversation:struts2-conversation-scope-plugin (1.3.1) +75 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.1.0.release)

org.springframework:spring-webmvc MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.ctlok:spring-webmvc-rythm =1.3.6, =2.1.1, =0.1.5, =0.9.2, =1.1.1, =1.1.4,...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +47 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.0.8.release)

org.springframework:spring-webmvc MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 - co.paralleluniverse:comsat-spring-webm...

cc.concurrent:config-server (0.1), ch.ralscha:extdirectspring (>=1.3.6, <=1.3.8) +186 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.2.4.release)

org.springframework:spring-webmvc MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cc.concurrent:config-server 0.1 - ch.ralscha:extdirectspring =1.3.6, =3.1.3, =3.1.3,...

ai.astraform:remote-domain-conformance-java (0.2.0), ai.astraform:remote-domain-template-java-spring (0.2.0) +4012 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.8)

org.springframework:spring-webmvc MAVEN version =7.0.0, =0.1.0, =0.0.1, =0.0.1, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-47884 Source advisory: OSV:GHSA-PC63-QCMH-9CMG...

com.github.miemiedev:mybatis-paginator (>=1.2.10, <=1.2.17), com.hastybox:lesscss-compile-service (>=0.2.0, <=0.2.1) +25 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.0.0.release)

org.springframework:spring-webmvc MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.miemiedev:mybatis-paginator =1.2.10, =0.2.0, =1.2.0.rc2, =1.2.0.rc2,...

be.dnsbelgium:rdap-server (1.1.0), co.paralleluniverse:comsat-spring-boot (0.5.0) +239 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.1.7.release)

org.springframework:spring-webmvc MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - be.dnsbelgium:rdap-server 1.1.0 - co.paralleluniverse:comsat-spring-boot 0.5.0 -...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-app-rt (>=1.20-rc1, <=1.31) +15 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.0.2.release)

org.springframework:spring-webmvc MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20-rc1, =1.6, =1.6, =1.6, =1.1.1,...

ch.ralscha:extdirectspring (>=1.2.0, <=1.2.2), com.3pillarglobal.labs:spring-integration-aws (>=1.0.0-release, <=1.1) +97 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.1.2.release)

org.springframework:spring-webmvc MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.2.0, =1.0.0-release, =3.1.2, =3.1.2, =4.2.1, =4.2.1,...

am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +280 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.3.5.release)

org.springframework:spring-webmvc MAVEN version 4.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =0.0.25, =1.3.1, =0.0.25, =0.0.25,...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=4.0.0), cn.afterturn:easypoi-web (>=3.0.1, <=4.0.0) +162 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.1.1.release)

org.springframework:spring-webmvc MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =3.0.1, =3.1.0, =3.1.0, =1.0.4,...

org.springmodules:spring-modules-jakarta-commons (0.7), org.springmodules:spring-modules-osworkflow (0.7) potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (2.0.1)

org.springframework:spring-webmvc MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons 0.7 -...

com.github.skeychen:dswork-config (>=9.0.1, <=9.1.1), com.github.skeychen:dswork-javaweb (>=9.0.1, <=9.1.1) +45 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.3.28.release)

org.springframework:spring-webmvc MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.skeychen:dswork-config =9.0.1, =9.0.1, =9.0.1, =2.2.0, =2.2.0, =2.2.0,...

ch.ralscha:extdirectspring (>=1.0.4, <=1.0.11), com.github.greengerong:green.monitor (>=1.0, <=1.4) +302 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.0.5.release)

org.springframework:spring-webmvc MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.0.4, =1.0, =1.0.1.ga, =1.0.0, =1.0, =2011.11.07.release...

org.springframework.ws:spring-ws-core (1.0-m3) potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (2.0.2)

org.springframework:spring-webmvc MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework.ws:spring-ws-core 1.0-m3 Source cves: CVE-2026-47884 Source advisory:...