com.thecookiezen:archiledger-core (>=0.0.4, <=0.0.5), org.springframework.ai:spring-ai-starter-model-transformers (>=1.1.0-m1, <=1.1.4) potentially affected by CVE-2026-40979 via org.springframework.ai:spring-ai-autoconfigure-model-transformers (>=1.1.0-m1, <=1.1.4)

org.springframework.ai:spring-ai-autoconfigure-model-transformers MAVEN version =1.1.0-m1, =0.0.4, =1.1.0-m1, =1.1.4 Source cves: CVE-2026-40979 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16316420...

org.springframework.ai:spring-ai-starter-vector-store-typesense (>=1.0.0-m7, <=1.0.5), org.springframework.ai:spring-ai-typesense-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-typesense-store (>=1.0.0-m5, <=1.0.5)

org.springframework.ai:spring-ai-typesense-store MAVEN version =1.0.0-m5, =1.0.0-m7, =1.0.0-m5, =1.0.0-m6 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321396...

org.springframework.ai:spring-ai-starter-vector-store-couchbase (>=1.1.0-m1, <=1.1.4) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-couchbase-store (>=1.1.0-m1, <=1.1.4)

org.springframework.ai:spring-ai-couchbase-store MAVEN version =1.1.0-m1, =1.1.0-m1, =1.1.4 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16316423...

org.springframework.ai:spring-ai-starter-vector-store-couchbase (>=1.0.0-m7, <=1.0.5) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-couchbase-store (>=1.0.0-m7, <=1.0.5)

org.springframework.ai:spring-ai-couchbase-store MAVEN version =1.0.0-m7, =1.0.0-m7, =1.0.5 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16316423...

io.github.aigoodle:agent-start-store-milvus (0.1.0), org.springframework.ai:spring-ai-starter-vector-store-milvus (>=1.1.0-m1, <=1.1.4) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-milvus-store (>=1.1.0-m1, <=1.1.4)

org.springframework.ai:spring-ai-milvus-store MAVEN version =1.1.0-m1, =1.1.0-m1, =1.1.4 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321391...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.1.0-m1, <=1.1.4) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-gemfire-store (>=1.1.0-m1, <=1.1.4)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.1.0-m1, =1.1.0-m1, =1.1.4 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321389...

org.springframework.ai:spring-ai-gemfire-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6), org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.0.0-m7, <=1.0.5) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-gemfire-store (>=1.0.0-m5, <=1.0.5)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.5 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321389...

org.springframework.ai:spring-ai-starter-vector-store-mongodb-atlas (>=1.1.0-m1, <=1.1.4) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-mongodb-atlas-store (>=1.1.0-m1, <=1.1.4)

org.springframework.ai:spring-ai-mongodb-atlas-store MAVEN version =1.1.0-m1, =1.1.0-m1, =1.1.4 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321392...

io.github.vishalmysore:easyqserver (>=0.2.8.11.1, <=0.2.8.12.3), org.springframework.ai:spring-ai-mongodb-atlas-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6) +1 more potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-mongodb-atlas-store (>=1.0.0-m5, <=1.0.5)

org.springframework.ai:spring-ai-mongodb-atlas-store MAVEN version =1.0.0-m5, =0.2.8.11.1, =1.0.0-m5, =1.0.0-m7, =1.0.5 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321392...

org.springframework.ai:spring-ai-starter-vector-store-weaviate (>=1.0.0-m7, <=1.0.5), org.springframework.ai:spring-ai-weaviate-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-weaviate-store (>=1.0.0-m5, <=1.0.5)

org.springframework.ai:spring-ai-weaviate-store MAVEN version =1.0.0-m5, =1.0.0-m7, =1.0.0-m5, =1.0.0-m6 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321397...

org.springframework.ai:spring-ai-starter-vector-store-weaviate (>=1.1.0-m1, <=1.1.4) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-weaviate-store (>=1.1.0-m1, <=1.1.4)

org.springframework.ai:spring-ai-weaviate-store MAVEN version =1.1.0-m1, =1.1.0-m1, =1.1.4 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16321397...

cc.allio.uno:uno-data-db (>=1.1.9, <=1.2.1), cc.allio.uno:uno-test (>=1.1.9, <=1.2.1) +364 more potentially affected by CVE-2026-7045 via com.baomidou:dynamic-datasource-spring-boot-starter (>=2.4.2, <=4.3.0)

com.baomidou:dynamic-datasource-spring-boot-starter MAVEN version =2.4.2, =1.1.9, =1.1.9, =0.3.0, =0.4.0, =1.0.4.r, =1.0.0, =1.0.0, =1.2.3, =1.2.3, =1.2.3, =1.2.3, =1.2.3, =1.2.3, =1.3.6.2 and more Source cves: CVE-2026-7045 Source advisory: MEND:CVE-2026-7045...

com.alilitech:boot-plus-log (>=2.1.0, <=4.0.0), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0) +8 more potentially affected by CVE-2026-42034 via org.webjars.npm:axios (>=1.1.3, <=1.7.2)

org.webjars.npm:axios MAVEN version =1.1.3, =2.1.0, =2.0.0, =1.0.3, =1.0.0, =2.1.1, =1.0.0, =1.0.0, =2.1.3, =2.0.0, =1.0.2, =1.0.9 Source cves: CVE-2026-42034 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16298131...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), de.gematik.test.tiger:tiger-on-fhir (>=1.1.1, <=1.2.1) +6 more potentially affected by CVE-2026-42037 via org.webjars.npm:axios (>=1.4.0, <=1.7.2)

org.webjars.npm:axios MAVEN version =1.4.0, =2.0.0, =1.1.1, =2.1.1, =2.1.1, =2.1.1, =2.1.3, =2.1.1, =1.0.6, =1.0.9 Source cves: CVE-2026-42037 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16299820...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.3.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.3.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.11.2)

org.apache.camel:camel-infinispan MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.3.0 -...

org.apache.camel.springboot:camel-infinispan-starter (3.11.3) potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.11.3)

org.apache.camel:camel-infinispan MAVEN version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-starter 3.11.3 Source cves: CVE-2026-6857 Sourc...

org.apache.camel.springboot:camel-infinispan-starter (3.11.4) potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.11.4)

org.apache.camel:camel-infinispan MAVEN version 3.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-starter 3.11.4 Source cves: CVE-2026-6857 Sourc...

org.apache.camel.springboot:camel-infinispan-starter (3.11.6) potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.11.6)

org.apache.camel:camel-infinispan MAVEN version 3.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-starter 3.11.6 Source cves: CVE-2026-6857 Sourc...

org.apache.camel.springboot:camel-infinispan-starter (3.11.7) potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.11.7)

org.apache.camel:camel-infinispan MAVEN version 3.11.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.springboot:camel-infinispan-starter 3.11.7 Source cves: CVE-2026-6857 Sourc...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.4.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.4.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.12.0)

org.apache.camel:camel-infinispan MAVEN version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.4.0 -...