ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +716 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.2.3.release)

org.springframework:spring-expression MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter =0.1.6,...

ch.ralscha:extdirectspring (1.3.9), co.paralleluniverse:galaxy (1.3) +244 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.5.release)

org.springframework:spring-expression MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.ralscha:extdirectspring 1.3.9 - co.paralleluniverse:galaxy 1.3 -...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cedarsoftware:json-command-servlet (>=1.0.0, <=1.1.2) +179 more potentially affected by CVE-2026-41851 via org.springframework:spring-expression (3.2.6.release)

org.springframework:spring-expression MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...

com.geodevv.testing:irmina (>=1.0.0, <=1.0.2), com.github.dblock.waffle:waffle-spring-security3 (1.7.3) +105 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.12.release)

org.springframework:spring-expression MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.geodevv.testing:irmina =1.0.0, =2.5.0, =1.2.3, =1.4.19 and more Source...

com.geodevv.testing:irmina (>=1.0.0, <=1.0.2), com.github.dblock.waffle:waffle-spring-security3 (1.7.3) +105 more potentially affected by CVE-2026-41851 via org.springframework:spring-expression (3.2.12.release)

org.springframework:spring-expression MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.geodevv.testing:irmina =1.0.0, =2.5.0, =1.2.3, =1.4.19 and more Source...

com.free-now.apis:phrase-java-client (>=1.0.8, <=3.0.0), com.free-now.maven.plugins:phrase-plugin (>=2.0.0, <=2.1.0) +79 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.15.release)

org.springframework:spring-expression MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.free-now.apis:phrase-java-client =1.0.8, =2.0.0, =2.0.1, =2.0.1, =3.1.0,...

com.dtflys.forest:forest-spring (1.0.0), com.garethahealy.amq6-dual-jaas-plugin:amq6-dual-jaas-plugin-parent (>=1.2.0-beta2, <=1.4.0) +557 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (3.2.16.release)

org.springframework:spring-expression MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.dtflys.forest:forest-spring 1.0.0 -...

club.easy-utils:easy-wepay (>=0.0.1-snaoshot, <=0.0.2-snaoshot), club.easy-utils:easy-weprogram (>=0.0.1-snaoshot, <=1.0.2.1) +69 more potentially affected by CVE-2026-41851 via org.springframework:spring-expression (3.2.17.release)

org.springframework:spring-expression MAVEN version 3.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - club.easy-utils:easy-wepay =0.0.1-snaoshot, =0.0.1-snaoshot, =1.2, =1.0.0,...

ar.com.onready:spring-resttemplate-logger (1.0.2), br.com.ledgertec:rap-conector-client (>=0.9.0-1, <=1.0.0) +261 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.0.0.release)

org.springframework:spring-expression MAVEN version 4.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ar.com.onready:spring-resttemplate-logger 1.0.2 -...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.coherentlogic.coherent.data-model:data-model-core (>=1.0.13-release, <=1.0.14-release) +89 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.0.1.release)

org.springframework:spring-expression MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =1.0.13-release,...

cn.jairdavis:jair-common-utils (1.0.4), com.allenru:cross-origin (1.0.1) +171 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.0.2.release)

org.springframework:spring-expression MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.jairdavis:jair-common-utils 1.0.4 - com.allenru:cross-origin 1.0.1 -...

cn.jairdavis:jair-common-utils (1.0.4), com.allenru:cross-origin (1.0.1) +171 more potentially affected by CVE-2026-41851 via org.springframework:spring-expression (4.0.2.release)

org.springframework:spring-expression MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.jairdavis:jair-common-utils 1.0.4 - com.allenru:cross-origin 1.0.1 -...

at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-core (1.1.0.release) +310 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.0.3.release)

org.springframework:spring-expression MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release -...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +320 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.2.8.release)

org.springframework:spring-expression MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

au.com.mountain-pass:hyperstate-cert (>=1, <=10), au.com.mountain-pass:hyperstate-client (>=1, <=10) +1188 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.3.2.release)

org.springframework:spring-expression MAVEN version 4.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - au.com.mountain-pass:hyperstate-cert =1, =1, =1, =1, =1, =1, =0.1, =1.0.0-rc,...

cn.easyproject:easycommondao-hibernate3 (>=1.1.0-release, <=1.4.0-release), cn.easyproject:easycommondao-hibernate4 (>=1.1.0-release, <=1.4.0-release) +1995 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.3.release)

org.springframework:spring-expression MAVEN version 4.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.easyproject:easycommondao-hibernate3 =1.1.0-release, =1.1.0-release,...

ch.sbb.releasetrain:action (0.0.25), ch.sbb.releasetrain:config (0.0.25) +551 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.2.7.release)

org.springframework:spring-expression MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.sbb.releasetrain:action 0.0.25 - ch.sbb.releasetrain:config 0.0.25 -...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +320 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.2.8.release)

org.springframework:spring-expression MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

com.17jee:e-core-query (>=3.0.0, <=3.0.1.11), com.17jee:e-core-query-ext (>=3.0.0, <=3.0.1.11) +168 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.2.9.release)

org.springframework:spring-expression MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.17jee:e-core-query =3.0.0, =3.0.0, =3.0.1.5, =3.0.1.7, =2.0.4, =2.1, =1.1...

com.17jee:e-core-query (>=3.0.0, <=3.0.1.11), com.17jee:e-core-query-ext (>=3.0.0, <=3.0.1.11) +168 more potentially affected by CVE-2026-41851 via org.springframework:spring-expression (4.2.9.release)

org.springframework:spring-expression MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.17jee:e-core-query =3.0.0, =3.0.0, =3.0.1.5, =3.0.1.7, =2.0.4, =2.1, =1.1...