org.webjars.npm:github-com-daichirata-vue-sanitize (0.2.2), org.webjars.npm:github-com-daichirata-vue-sanitize- (0.2.2) potentially affected by CVE-2026-53606 via org.webjars.npm:sanitize-html (2.7.0)

org.webjars.npm:sanitize-html MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sanitize-html and may be impacted: - org.webjars.npm:github-com-daichirata-vue-sanitize 0.2.2 -...

org.webjars.npm:workbox-build (3.3.1), org.webjars.npm:xml2json (>=0.8.2, <=0.9.1) potentially affected by CVE-2026-48038 via org.webjars.npm:joi (>=6.4.3, <=11.4.0)

org.webjars.npm:joi MAVEN version =6.4.3, =0.8.2, =0.9.1 Source cves: CVE-2026-48038 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17317898...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.8, <=1.0.12), cn.crushes.cloud:crush-zipkin (>=2.4.5, <=2.5.0-ga) +515 more potentially affected by CVE-2026-41708 via org.springframework.cloud:spring-cloud-sleuth-instrumentation (>=3.0.0, <=3.1.11)

org.springframework.cloud:spring-cloud-sleuth-instrumentation MAVEN version =3.0.0, =1.0.8, =2.4.5, =0.0.2, =0.0.2, =1.0.0-release, =1.0.0-release, =1.0.0-release, =1.1.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41708 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-17325634...

org.webjars.npm:datauri (>=1.1.0, <=2.0.0), org.webjars.npm:image-thumbnail (1.0.15) +1 more potentially affected by CVE-2025-71330 via org.webjars.npm:image-size (>=0.5.5, <=2.0.0-alpha.1)

org.webjars.npm:image-size MAVEN version =0.5.5, =1.1.0, =2.7.1, =2.7.2 Source cves: CVE-2025-71330 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17295817...

ROOT-APP-MAVEN-CVE-2020-13959 CVE-2020-13959 in io.root.org.apache.velocity:velocity-tools - Patched by Root

Root has patched CVE-2020-13959 in the io.root.org.apache.velocity:velocity-tools package for Root:Maven. Multiple fixed versions available...

com.epages:restdocs-api-spec-restassured (>=0.11.2, <=0.19.4), io.github.bgmsound:documentify-core (>=0.0.1, <=0.0.2) +4 more potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-restassured (>=1.1.3.release, <=3.0.3)

org.springframework.restdocs:spring-restdocs-restassured MAVEN version =1.1.3.release, =0.11.2, =0.0.1, =1.0.0, =1.2.4, =2.0.0.release, =1.0.0, =2.2.1 Source cves: CVE-2026-40991 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKRESTDOCS-18322495...

org.hswebframework.web:hsweb-system-authorization-oauth2 (>=4.0.8, <=5.0.1) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (>=4.0.8, <=5.0.1)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version =4.0.8, =4.0.8, =5.0.1 Source cves: CVE-2026-11477 Source advisory: SNYK:JAVA-ORGHSWEBFRAMEWORKWEB-17232077...

com.browseengine.bobo:bobo-solr (>=3.0.0, <=3.2.0), com.browseengine.bobo:cardemo (>=3.0.0, <=3.2.0) +348 more potentially affected by CVE-2026-44825 via org.apache.solr:solr-core (>=1.3.0, <=10.0.0)

org.apache.solr:solr-core MAVEN version =1.3.0, =3.0.0, =3.0.0, =1.8.6, =0.40, =0.40, =0.3.1, =0.3.4, =0.3.4, =1.0.3, =1.0.3, =1.0.3, =1.0.5 and more Source cves: CVE-2026-44825 Source advisory: SNYK:JAVA-ORGAPACHESOLR-17139337...

org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-47139 via org.webjars.npm:vm2 (3.9.19)

org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...

org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-47140 via org.webjars.npm:vm2 (3.9.19)

org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...

PT-2026-47387

Root has patched GHSA-xpw8-rcwv-8f8p in the io.root.io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...

osv-java-poc

OSV Scanner CVE Detection POC — Vulnerable Java App ⚠️ WA...

org.webjars.npm:bazel__karma (1.7.0), org.webjars.npm:broccoli-merge-trees (2.0.0) +15 more potentially affected by CVE-2026-44705 +1 more via org.webjars.npm:tmp (>=0.0.24, <=0.2.3)

org.webjars.npm:tmp MAVEN version =0.0.24, =2.1.0, =0.19.11, =0.2.11, =3.2.3, =6.5.0, =2.52.0, =4.10.0 - org.webjars.npm:snyk-go-plugin 1.5.2 - org.webjars.npm:snyk-python-plugin 1.8.1 and more Source cves: CVE-2026-44705, CVE-2026-49982 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16881241...

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4shell-poc-maven ⚠️ INTENTIONALLY VULNERABLE FOR SCA T...

biz.devstack.springframework.boot:spring-boot-starter-api (>=1.0.0, <=1.2.1), biz.devstack:spring-boot-starter-api-quickstart (>=1.0.0, <=1.0.4) +1130 more potentially affected by CVE-2026-9370 via com.github.ulisesbocchio:jasypt-spring-boot (>=1.2, <=4.0.4)

com.github.ulisesbocchio:jasypt-spring-boot MAVEN version =1.2, =1.0.0, =1.0.0, =0.5.0, =0.1.0, =0.3.0, =0.5.0, =0.3.0, =0.3.0, =0.2.0, =0.2.0, =0.4.0, =0.4.0, =0.1.0, =0.1.0, =0.8.0 and more Source cves: CVE-2026-9370 Source advisory: SNYK:JAVA-COMGITHUBULISESBOCCHIO-16873884...

org.webjars.npm:coreui__coreui (4.2.1), org.webjars.npm:css-loader (>=2.1.0, <=6.7.2) +19 more potentially affected by CVE-2026-9358 via org.webjars.npm:postcss-selector-parser (>=4.0.0-rc.1, <=7.1.0)

org.webjars.npm:postcss-selector-parser MAVEN version =4.0.0-rc.1, =2.1.0, =3.1.0, =7.0.1, =4.0.2, =2.0.6, =2.1.0, =4.1.2, =6.2.0 and more Source cves: CVE-2026-9358 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16873883...

org.webjars.npm:github-com-wavesoft-local-echo (0.2.0), org.webjars.npm:launch-editor (>=2.2.1, <=2.14.1) +2 more potentially affected by CVE-2026-9277 via org.webjars.npm:shell-quote (1.10.0)

org.webjars.npm:shell-quote MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:shell-quote and may be impacted: - org.webjars.npm:github-com-wavesoft-local-echo 0.2.0 - org.webjars.npm:launch-editor =2.2.1, =2.14.1 -...

ROOT-APP-MAVEN-CVE-2024-57699 CVE-2024-57699 in io.root.net.minidev:json-smart - Patched by Root

Root has patched CVE-2024-57699 in the io.root.net.minidev:json-smart package for Root:Maven. Multiple fixed versions available...

Unity Linux 20.1060e / 20.1070e Security Update: maven-shared-utils (UTSA-2026-016689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016689 advisory. In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection...

org.webjars.npm:dash0__sdk-web (0.18.4), org.webjars.npm:scalar__import (>=0.3.16, <=0.4.6) +3 more potentially affected by CVE-2026-12644 via org.webjars.npm:ts-deepmerge (7.0.3)

org.webjars.npm:ts-deepmerge MAVEN version 7.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:ts-deepmerge and may be impacted: - org.webjars.npm:dash0sdk-web 0.18.4 - org.webjars.npm:scalarimport =0.3.16, =0.2.107, =1.1.13, =0.1.30,...