org.http4k:http4k-aws (3.94.0), org.http4k:http4k-client-apache (3.94.0) +26 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.94.0)

org.http4k:http4k-core MAVEN version 3.94.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.94.0 - org.http4k:http4k-client-apache 3.94.0 - org.http4k:http4k-client-apache-async 3.94...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-12816 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519173...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-12860 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-12860 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518024...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-58061 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-58061 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519137...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-58063 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-58063 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519081...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-14682 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-14682 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518097...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-59651 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-59651 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512579...

org.http4k:http4k-aws (2.18.3), org.http4k:http4k-client-apache (2.18.3) +13 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.18.3)

org.http4k:http4k-core MAVEN version 2.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.18.3 - org.http4k:http4k-client-apache 2.18.3 - org.http4k:http4k-client-okhttp 2.18.3 -...

org.http4k:http4k-client-apache (1.25.0), org.http4k:http4k-client-okhttp (1.25.0) +8 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.25.0)

org.http4k:http4k-core MAVEN version 1.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.25.0 - org.http4k:http4k-client-okhttp 1.25.0 - org.http4k:http4k-contract 1.25....

org.http4k:http4k-aws (3.153.0), org.http4k:http4k-client-apache (3.153.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.153.0)

org.http4k:http4k-core MAVEN version 3.153.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.153.0 - org.http4k:http4k-client-apache 3.153.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.34.0), org.http4k:http4k-client-apache (3.34.0) +25 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.34.0)

org.http4k:http4k-core MAVEN version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.34.0 - org.http4k:http4k-client-apache 3.34.0 - org.http4k:http4k-client-apache-async 3.34...

org.http4k:http4k-aws (2.25.4), org.http4k:http4k-client-apache (2.25.4) +14 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.25.4)

org.http4k:http4k-core MAVEN version 2.25.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.25.4 - org.http4k:http4k-client-apache 2.25.4 - org.http4k:http4k-client-okhttp 2.25.4 -...

org.http4k:http4k-client-apache (1.20.0), org.http4k:http4k-client-okhttp (1.20.0) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.20.0)

org.http4k:http4k-core MAVEN version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.20.0 - org.http4k:http4k-client-okhttp 1.20.0 - org.http4k:http4k-contract 1.20....

org.http4k:http4k-client-apache (2.4.0), org.http4k:http4k-client-okhttp (2.4.0) +8 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.4.0)

org.http4k:http4k-core MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 2.4.0 - org.http4k:http4k-client-okhttp 2.4.0 - org.http4k:http4k-contract 2.4.0 -...

org.http4k:http4k-client-apache (1.23.0), org.http4k:http4k-client-okhttp (1.23.0) +8 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.23.0)

org.http4k:http4k-core MAVEN version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.23.0 - org.http4k:http4k-client-okhttp 1.23.0 - org.http4k:http4k-contract 1.23....

org.http4k:http4k-aws (2.20.0), org.http4k:http4k-client-apache (2.20.0) +13 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.20.0)

org.http4k:http4k-core MAVEN version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.20.0 - org.http4k:http4k-client-apache 2.20.0 - org.http4k:http4k-client-okhttp 2.20.0 -...

org.http4k:http4k-aws (2.31.4), org.http4k:http4k-client-apache (2.31.4) +16 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.31.4)

org.http4k:http4k-core MAVEN version 2.31.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.31.4 - org.http4k:http4k-client-apache 2.31.4 - org.http4k:http4k-client-okhttp 2.31.4 -...

org.http4k:http4k-aws (3.11.1), org.http4k:http4k-client-apache (3.11.1) +23 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.11.1)

org.http4k:http4k-core MAVEN version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.11.1 - org.http4k:http4k-client-apache 3.11.1 - org.http4k:http4k-client-apache-async 3.11...

org.http4k:http4k-aws (3.16.0), org.http4k:http4k-client-apache (3.16.0) +23 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.16.0)

org.http4k:http4k-core MAVEN version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.16.0 - org.http4k:http4k-client-apache 3.16.0 - org.http4k:http4k-client-apache-async 3.16...

org.http4k:http4k-aws (3.21.2), org.http4k:http4k-client-apache (3.21.2) +24 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.21.2)

org.http4k:http4k-core MAVEN version 3.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.21.2 - org.http4k:http4k-client-apache 3.21.2 - org.http4k:http4k-client-apache-async 3.21...