ROOT-APP-MAVEN-CVE-2026-69220 CVE-2026-69220 in com.rabbitmq:amqp-client - Patched by Root

Root has patched CVE-2026-69220 in the com.rabbitmq:amqp-client package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38821 CVE-2024-38821 in org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2024-38821 in the org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

com.hazelcast:hazelcast-client (2.6.3), com.hazelcast:hazelcast-cloud (2.6.3) +10 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (2.6.3)

com.hazelcast:hazelcast MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 2.6.3 - com.hazelcast:hazelcast-cloud 2.6.3 - com.hazelcast:hazelcast-hibernate...

ROOT-APP-MAVEN-CVE-2026-65905 CVE-2026-65905 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-65905 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-40981 CVE-2026-40981 in org.springframework.cloud:spring-cloud-config-server - Patched by Root

Root has patched CVE-2026-40981 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-33871 CVE-2026-33871 in io.netty:netty-codec-http2 - Patched by Root

Root has patched CVE-2026-33871 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-56819 CVE-2026-56819 in io.netty:netty-codec-http2 - Patched by Root

Root has patched CVE-2026-56819 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-54291 CVE-2026-54291 in org.postgresql:postgresql - Patched by Root

Root has patched CVE-2026-54291 in the org.postgresql:postgresql package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41717 CVE-2026-41717 in org.springframework.data:spring-data-mongodb - Patched by Root

Root has patched CVE-2026-41717 in the org.springframework.data:spring-data-mongodb package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2021-22570 CVE-2021-22570 in com.google.protobuf:protobuf-java - Patched by Root

Root has patched CVE-2021-22570 in the com.google.protobuf:protobuf-java package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-34981 CVE-2023-34981 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2023-34981 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

flux:rabbitmq-action (>=1.0.0, <=1.0.1), flux:rabbitmq-trigger (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.2.0)

com.rabbitmq:amqp-client MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - flux:rabbitmq-action =1.0.0, =1.0.0, =1.0.3, =0.14.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.7.1, =5.7.1, =5.7.1,...

CLSA-2026-1786379602 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.15-tuxcare.1...

ROOT-APP-MAVEN-CVE-2025-61795 CVE-2025-61795 in io.root.org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-61795 in the io.root.org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.h2o:h2o-app (>=0.1.22, <=0.1.25) +1042 more potentially affected by CVE-2026-14682 via org.bouncycastle:bcprov-jdk15 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2026-14682 Source advisory:...

ai.stainless:grails-tika (0.1.0), at.aimon.core:aimon-scheduling-quartz (>=0.0.1, <=0.2.3) +3842 more potentially affected by CVE-2026-55223 via com.mchange:c3p0 (>=0.9.2, <=0.13.0)

com.mchange:c3p0 MAVEN version =0.9.2, =0.0.1, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 and more Source cves: CVE-2026-55223 Source advisory: GHSA-W6W4-RJH9-9R58...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.118), org.apache.juddi:juddi-tomcat (>=3.3.7, <=3.3.10) +11 more potentially affected by CVE-2026-55955 via org.apache.tomcat:tomcat (>=9.0.20, <=9.0.118)

org.apache.tomcat:tomcat MAVEN version =9.0.20, =9.0.31, =3.3.7, =3.3.7, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =5.22.2, =8.0.0, =10.1.0 Source cves: CVE-2026-55955 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-17732889...

com.github.manosbatsis.kmm.converters:kmm-converters-elide (1.0.0-alpha.2), com.github.manosbatsis.kmm.converters:kmm-converters-elide-autoconfigure (1.0.0-alpha.2) +42 more potentially affected by CVE-2026-57954 via com.yahoo.elide:elide-core (>=1.0.0.1, <=7.2.0)

com.yahoo.elide:elide-core MAVEN version =1.0.0.1, =1.0.0-alpha.3, =1.0.0-alpha.3, =1.0.0-alpha.3, =0.0.1, =2.3.0, =5.0.0, =5.0.0, =1.0.0.8, =1.0.0.6, =5.1.2 and more Source cves: CVE-2026-57954 Source advisory: SNYK:JAVA-COMYAHOOELIDE-17755935...

org.biouno:uno-choice (1.5-alpha-1), org.jenkins-ci.plugins:ansible-tower (>=0.5.0, <=0.12.0) +7 more potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.17)

org.jenkins-ci.plugins:script-security MAVEN version 1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice 1.5-alpha-1 - org.jenkins-ci.plugins:ansible-tower =0.5.0, =1....

cn.weforward:weforward-data-mysql (>=1.1.0, <=1.2.17), com.alibaba.otter:canal.client (>=1.0.25, <=1.1.0) +345 more potentially affected by CVE-2026-41851 via org.springframework:spring-expression (3.2.9.release)

org.springframework:spring-expression MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.weforward:weforward-data-mysql =1.1.0, =1.0.25, =1.0.25, =1.0.25, =1.0.25,...