edu.asu.diging:giles-eco-requests (>=0.8, <=0.16), org.apereo.cas:cas-server-core-configuration-cloud-kafka (5.1.0-rc1) +98 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.1.1.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - edu.asu.diging:giles-eco-requests =0.8, =0.16 -...

com.huaweicloud.dis:huaweicloud-dis-spring-kafka (>=1.1.2, <=1.2.21), com.tencent.bk.devops.ci.common:common-kafka (>=1.3.0-rc.7-release, <=1.3.1-release-release) +3 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.8.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.huaweicloud.dis:huaweicloud-dis-spring-kafka =1.1.2, =1.3.0-rc.7-releas...

com.github.dcsolutions.kalinka:kalinka-pub (>=0.0.1, <=0.0.10), com.github.dcsolutions.kalinka:kalinka-pub-plugin (>=0.0.1, <=0.0.10) +13 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.2.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.dcsolutions.kalinka:kalinka-pub =0.0.1, =0.0.1, =0.0.2, =0.0.1,...

com.icthh.xm.commons:xm-commons-config (>=1.0.0, <=1.2.26), com.icthh.xm.commons:xm-commons-i18n (>=1.2.6, <=1.2.26) +14 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.1.6.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.icthh.xm.commons:xm-commons-config =1.0.0, =1.2.6, =1.0.0, =1.2.17,...

ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-agentic-factory (>=1.2.4, <=1.2.6) +407 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (>=3.3.0, <=3.3.15)

org.springframework.kafka:spring-kafka MAVEN version =3.3.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =2.2.1, =8.15.0, =8.15.0, =8.15.0, =8.4.0, =11.11.0 and more Source cves: CVE-2026-41726 Source advisory: GHSA-XVFQ-4Q6Q-GXX7...

org.springframework.cloud.stream.app:aggregate-counter-sink-kafka-09 (1.2.0.release), org.springframework.cloud.stream.app:bridge-processor-kafka-09 (1.2.0.release) +55 more potentially affected by CVE-2026-41731 via org.springframework.kafka:spring-kafka (1.0.5.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.cloud.stream.app:aggregate-counter-sink-kafka-09...

org.springframework.integration:spring-integration-kafka (2.0.0.release) potentially affected by CVE-2026-41731 via org.springframework.kafka:spring-kafka (1.0.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.integration:spring-integration-kafka 2.0.0.release Sour...

be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9), be.appify.prefab:prefab-core (0.2.0) +172 more potentially affected by CVE-2026-41731 via org.springframework.kafka:spring-kafka (>=4.0.0, <=4.0.5)

org.springframework.kafka:spring-kafka MAVEN version =4.0.0, =0.2.0, =0.2.0, =7.0.0-alpha-springboot4, =7.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =12.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =2.0.0-alpha-springboot4,...

ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-agentic-factory (>=1.2.4, <=1.2.6) +407 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (>=3.3.0, <=3.3.15)

org.springframework.kafka:spring-kafka MAVEN version =3.3.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =2.2.1, =8.15.0, =8.15.0, =8.15.0, =8.4.0, =11.11.0 and more Source cves: CVE-2026-41727 Source advisory: GHSA-53W6-V7CV-FC9H...

be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9), be.appify.prefab:prefab-core (0.2.0) +172 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (>=4.0.0, <=4.0.5)

org.springframework.kafka:spring-kafka MAVEN version =4.0.0, =0.2.0, =0.2.0, =7.0.0-alpha-springboot4, =7.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =12.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =2.0.0-alpha-springboot4,...

org.apache.skywalking:apm-spring-kafka-1.x-plugin (>=8.3.0, <=9.6.0) potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.3.11.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.apache.skywalking:apm-spring-kafka-1.x-plugin =8.3.0, =9.6.0 Source...

org.springframework.integration:spring-integration-kafka (2.3.1.release) potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.3.10.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.integration:spring-integration-kafka 2.3.1.release...

org.apereo.cas:cas-server-core-configuration-cloud-kafka (>=5.0.0.rc3, <=5.0.10), org.springframework.cloud.stream.app:aggregate-counter-sink-kafka-09 (1.1.1.release) +50 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.0.4.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-kafka =5.0.0.rc3, =5.0.1...

org.apereo.cas:cas-server-core-configuration-cloud-kafka (>=5.0.0.rc3, <=5.0.10), org.springframework.cloud.stream.app:aggregate-counter-sink-kafka-09 (1.1.1.release) +50 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.0.4.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-kafka =5.0.0.rc3, =5.0.1...

io.kermoss:reactive-business-flow (0.0.1.release) potentially affected by CVE-2026-41731 via org.springframework.kafka:spring-kafka (1.3.8.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - io.kermoss:reactive-business-flow 0.0.1.release Source cves: CVE-2026-41731...

com.buession.cas:cas-server-support-logging (>=3.0.0, <=3.0.1), com.buession.cas:cas-server-support-logging-core (>=3.0.0, <=3.0.1) +101 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (>=2.9.0, <=2.9.13)

org.springframework.kafka:spring-kafka MAVEN version =2.9.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.1.34, =1.3.0, =1.1.3, =1.2.3 - com.infobip.kafkistry:kafkistry-app 0.3.0 - com.infobip.kafkistry:kafkistry-auditing 0.3.0 - com.infobip.kafkistry:kafkistry-consume 0.3.0 -...

org.springframework.integration:spring-integration-kafka (2.0.0.release) potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.0.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.integration:spring-integration-kafka 2.0.0.release Sour...

be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9), be.appify.prefab:prefab-core (0.2.0) +172 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (>=4.0.0, <=4.0.5)

org.springframework.kafka:spring-kafka MAVEN version =4.0.0, =0.2.0, =0.2.0, =7.0.0-alpha-springboot4, =7.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =12.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =2.0.0-alpha-springboot4,...

org.springframework.integration:spring-integration-kafka (2.0.1.release) potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.0.3.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.integration:spring-integration-kafka 2.0.1.release Sour...

org.springframework.cloud:spring-cloud-starter-bus-kafka (1.3.1.release), org.springframework.cloud:spring-cloud-stream-docs (chelsea.sr2) potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.4.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.cloud:spring-cloud-starter-bus-kafka 1.3.1.release -...