be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9), be.appify.prefab:prefab-core (0.2.0) +208 more potentially affected by CVE-2026-59278 via org.springframework.kafka:spring-kafka (>=4.0.0-m2, <=4.0.6)

org.springframework.kafka:spring-kafka MAVEN version =4.0.0-m2, =0.2.0, =0.2.0, =7.0.0-alpha-springboot4, =7.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =12.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =1.5....

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=12.1.0), com.almis.awe.clients:test-react (>=0.0.11, <=1.0.5) +156 more potentially affected by CVE-2026-59270 via org.springframework.security:spring-security-ldap (>=5.7.0, <=7.0.6)

org.springframework.security:spring-security-ldap MAVEN version =5.7.0, =1.0.0.ee-20260424025040, =0.0.11, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.13.1 and more Source cves: CVE-2026-59270 Source advisory:...

com.erudika:para-server (>=1.55.0, <=1.55.2), com.kerb4j:kerb4j-server-spring-security-ldap (>=0.5.0, <=0.5.1) +17 more potentially affected by CVE-2026-59270 via org.springframework.security:spring-security-ldap (7.1.0)

org.springframework.security:spring-security-ldap MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-ldap and may be impacted: - com.erudika:para-server =1.55.0, =0.5.0, =7.0.1, =7.0.1,...

io.awspring.cloud:spring-cloud-aws-starter-integration-sns (>=4.0.0-m1, <=4.2.0), org.citrusframework.mvn:citrus-maven-plugin (5.0.0-m1) +34 more potentially affected by CVE-2026-47864 via org.springframework.integration:spring-integration-http (>=7.0.0-m1, <=7.0.5)

org.springframework.integration:spring-integration-http MAVEN version =7.0.0-m1, =4.0.0-m1, =4.2.0 - org.citrusframework.mvn:citrus-maven-plugin 5.0.0-m1 - org.citrusframework:citrus-agent-connector 5.0.0-m1 - org.citrusframework:citrus-cucumber-all 5.0.0-m1 -...

cn.herodotus.dante:message-mqtt-spring-boot-starter (4.1.0.1), org.citrusframework.mvn:citrus-maven-plugin (>=5.0.0-m2, <=5.0.2) +35 more potentially affected by CVE-2026-47864 via org.springframework.integration:spring-integration-http (7.1.0)

org.springframework.integration:spring-integration-http MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-http and may be impacted: - cn.herodotus.dante:message-mqtt-spring-boot-start...

be.appify.prefab:prefab-annotation-processor (>=0.11.0, <=0.12.0), ch.admin.bit.jeap:jeap-audit-command-builder (>=8.8.0, <=10.16.0) +157 more potentially affected by CVE-2026-59317 via org.springframework.kafka:spring-kafka (4.1.0)

org.springframework.kafka:spring-kafka MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - be.appify.prefab:prefab-annotation-processor =0.11.0, =8.8.0, =8.8.0, =15.7.0,...

be.appify.prefab:prefab-annotation-processor (>=0.11.0, <=0.12.0), ch.admin.bit.jeap:jeap-audit-command-builder (>=8.8.0, <=10.16.0) +157 more potentially affected by CVE-2026-59278 via org.springframework.kafka:spring-kafka (4.1.0)

org.springframework.kafka:spring-kafka MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - be.appify.prefab:prefab-annotation-processor =0.11.0, =8.8.0, =8.8.0, =15.7.0,...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +20410 more potentially affected by CVE-2026-47885 via org.springframework:spring-web (>=6.1.0, <=7.0.8)

org.springframework:spring-web MAVEN version =6.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.0.1, =0.1.4 and more Source cves: CVE-2026-47885 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267077...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3163 more potentially affected by CVE-2026-47883 via org.springframework:spring-webflux (>=6.2.0, <=7.0.8)

org.springframework:spring-webflux MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-47883 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267434...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3163 more potentially affected by CVE-2026-47890 via org.springframework:spring-webflux (>=6.2.0, <=7.0.8)

org.springframework:spring-webflux MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-47890 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267095...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +1251 more potentially affected by CVE-2026-47893 via org.springframework:spring-webflux (>=7.0.0-m7, <=7.0.8)

org.springframework:spring-webflux MAVEN version =7.0.0-m7, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =0.1.0, =0.1.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0-beta.3, =4.7.5 and more Source cves: CVE-2026-47893 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267442...

cn.herodotus.dante:dante-authentication-autoconfigure (>=4.0.0.0-m2, <=4.0.0.0-m3), cn.herodotus.dante:dante-authorization-autoconfigure (>=4.0.0.0-m2, <=4.0.0.0-m3) +38 more potentially affected by CVE-2026-47841 via org.springframework.security:spring-security-webauthn (>=7.0.0, <=7.0.6)

org.springframework.security:spring-security-webauthn MAVEN version =7.0.0, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.2.0-m4, =4.0.2.0-m4, =4.0.0.0-m4, =4.0.0.0-m4, =4.1.0.0-m1 and more Sourc...

cn.herodotus.dante:dante-authentication-autoconfigure (4.1.0.1), cn.herodotus.dante:dante-authorization-autoconfigure (4.1.0.1) +38 more potentially affected by CVE-2026-47841 via org.springframework.security:spring-security-webauthn (7.1.0)

org.springframework.security:spring-security-webauthn MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-webauthn and may be impacted: - cn.herodotus.dante:dante-authentication-autoconfigure...

org.springframework.ai:spring-ai-starter-model-chat-memory-repository-redis (2.0.0) potentially affected by CVE-2026-59319 via org.springframework.ai:spring-ai-model-chat-memory-repository-redis (2.0.0)

org.springframework.ai:spring-ai-model-chat-memory-repository-redis MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ai:spring-ai-model-chat-memory-repository-redis and may be impacted: -...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=8.0.0-rc1, <=8.0.2), org.openwms:org.openwms.configuration (3.0.0) potentially affected by CVE-2026-59315 via org.springframework.cloud:spring-cloud-config-monitor (>=5.0.0, <=5.0.4)

org.springframework.cloud:spring-cloud-config-monitor MAVEN version =5.0.0, =8.0.0-rc1, =8.0.2 - org.openwms:org.openwms.configuration 3.0.0 Source cves: CVE-2026-59315 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267421...

ai.astraform:remote-domain-author-kit-java (0.2.0), ai.astraform:remote-domain-conformance-java (0.2.0) +6837 more potentially affected by CVE-2026-59281 via org.springframework:spring-web (>=7.0.0-m1, <=7.0.8)

org.springframework:spring-web MAVEN version =7.0.0-m1, =0.1.0, =0.0.1, =0.0.1, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =0.1.0, =0.1.0, =1.8.1 and more Source cves: CVE-2026-59281 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267078...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +15236 more potentially affected by CVE-2026-47889 via org.springframework:spring-web (>=6.2.0, <=7.0.8)

org.springframework:spring-web MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.0.1, =0.0.1, =0.3.0, =0.3.0, =0.5.7 and more Source cves: CVE-2026-47889 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267079...

ch.nexsol-tech.gateway:config-server (>=1.6.0, <=1.7.0), net.sf.tsl2nano:tsl3-beanui (0.0.2) +6 more potentially affected by CVE-2026-47836 via org.springframework.cloud:spring-cloud-config-server (>=5.0.0-m1, <=5.0.4)

org.springframework.cloud:spring-cloud-config-server MAVEN version =5.0.0-m1, =1.6.0, =8.0.0-rc1, =8.0.0-rc1, =5.0.0-m1, =5.0.0-m1, =5.0.2 Source cves: CVE-2026-47836 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267449...

ch.admin.bit.jeap:jeap-spring-boot-config-starter (>=17.16.0, <=18.5.0), ch.sbb:spring-cloud-stream-binder-solace (>=5.0.5, <=9.3.0) +466 more potentially affected by CVE-2026-59303 via org.springframework.cloud:spring-cloud-stream (>=4.2.0, <=5.0.2)

org.springframework.cloud:spring-cloud-stream MAVEN version =4.2.0, =17.16.0, =5.0.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =3.5.5.3, =3.4.0.0, =3.5.5.3, =3.5.5.3, =3.4.0.0, =3.4.0.0, =3.5.5.2 and more Source cves: CVE-2026-59303https://vulners.com/cve/C...

ch.admin.bit.jeap:jeap-spring-boot-config-starter (>=17.16.0, <=18.5.0), ch.sbb:spring-cloud-stream-binder-solace (>=5.0.5, <=9.3.0) +466 more potentially affected by CVE-2026-59306 via org.springframework.cloud:spring-cloud-stream (>=4.2.0, <=5.0.2)

org.springframework.cloud:spring-cloud-stream MAVEN version =4.2.0, =17.16.0, =5.0.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =3.5.5.3, =3.4.0.0, =3.5.5.3, =3.5.5.3, =3.4.0.0, =3.4.0.0, =3.5.5.2 and more Source cves: CVE-2026-59306https://vulners.com/cve/C...