ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +1251 more potentially affected by CVE-2026-47893 via org.springframework:spring-webflux (>=7.0.0-m7, <=7.0.8)

org.springframework:spring-webflux MAVEN version =7.0.0-m7, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =0.1.0, =0.1.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0-beta.3, =4.7.5 and more Source cves: CVE-2026-47893 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267442...

cn.herodotus.dante:dante-authentication-autoconfigure (>=4.0.0.0-m2, <=4.0.0.0-m3), cn.herodotus.dante:dante-authorization-autoconfigure (>=4.0.0.0-m2, <=4.0.0.0-m3) +38 more potentially affected by CVE-2026-47841 via org.springframework.security:spring-security-webauthn (>=7.0.0, <=7.0.6)

org.springframework.security:spring-security-webauthn MAVEN version =7.0.0, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.2.0-m4, =4.0.2.0-m4, =4.0.0.0-m4, =4.0.0.0-m4, =4.1.0.0-m1 and more Sourc...

cn.herodotus.dante:dante-authentication-autoconfigure (4.1.0.1), cn.herodotus.dante:dante-authorization-autoconfigure (4.1.0.1) +38 more potentially affected by CVE-2026-47841 via org.springframework.security:spring-security-webauthn (7.1.0)

org.springframework.security:spring-security-webauthn MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-webauthn and may be impacted: - cn.herodotus.dante:dante-authentication-autoconfigure...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=8.0.0-rc1, <=8.0.2), org.openwms:org.openwms.configuration (3.0.0) potentially affected by CVE-2026-59315 via org.springframework.cloud:spring-cloud-config-monitor (>=5.0.0, <=5.0.4)

org.springframework.cloud:spring-cloud-config-monitor MAVEN version =5.0.0, =8.0.0-rc1, =8.0.2 - org.openwms:org.openwms.configuration 3.0.0 Source cves: CVE-2026-59315 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267421...

ai.astraform:remote-domain-author-kit-java (0.2.0), ai.astraform:remote-domain-conformance-java (0.2.0) +6837 more potentially affected by CVE-2026-59281 via org.springframework:spring-web (>=7.0.0-m1, <=7.0.8)

org.springframework:spring-web MAVEN version =7.0.0-m1, =0.1.0, =0.0.1, =0.0.1, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =0.1.0, =0.1.0, =1.8.1 and more Source cves: CVE-2026-59281 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267078...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +15236 more potentially affected by CVE-2026-47889 via org.springframework:spring-web (>=6.2.0, <=7.0.8)

org.springframework:spring-web MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.0.1, =0.0.1, =0.3.0, =0.3.0, =0.5.7 and more Source cves: CVE-2026-47889 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267079...

ch.nexsol-tech.gateway:config-server (>=1.6.0, <=1.7.0), net.sf.tsl2nano:tsl3-beanui (0.0.2) +6 more potentially affected by CVE-2026-47836 via org.springframework.cloud:spring-cloud-config-server (>=5.0.0-m1, <=5.0.4)

org.springframework.cloud:spring-cloud-config-server MAVEN version =5.0.0-m1, =1.6.0, =8.0.0-rc1, =8.0.0-rc1, =5.0.0-m1, =5.0.0-m1, =5.0.2 Source cves: CVE-2026-47836 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267449...

ch.admin.bit.jeap:jeap-spring-boot-config-starter (>=17.16.0, <=18.5.0), ch.sbb:spring-cloud-stream-binder-solace (>=5.0.5, <=9.3.0) +466 more potentially affected by CVE-2026-59303 via org.springframework.cloud:spring-cloud-stream (>=4.2.0, <=5.0.2)

org.springframework.cloud:spring-cloud-stream MAVEN version =4.2.0, =17.16.0, =5.0.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =3.5.5.3, =3.4.0.0, =3.5.5.3, =3.5.5.3, =3.4.0.0, =3.4.0.0, =3.5.5.2 and more Source cves: CVE-2026-59303https://vulners.com/cve/C...

ch.admin.bit.jeap:jeap-spring-boot-config-starter (>=17.16.0, <=18.5.0), ch.sbb:spring-cloud-stream-binder-solace (>=5.0.5, <=9.3.0) +466 more potentially affected by CVE-2026-59306 via org.springframework.cloud:spring-cloud-stream (>=4.2.0, <=5.0.2)

org.springframework.cloud:spring-cloud-stream MAVEN version =4.2.0, =17.16.0, =5.0.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =3.5.5.3, =3.4.0.0, =3.5.5.3, =3.5.5.3, =3.4.0.0, =3.4.0.0, =3.5.5.2 and more Source cves: CVE-2026-59306https://vulners.com/cve/C...

ch.admin.bit.jeap:jeap-spring-boot-config-starter (>=17.16.0, <=18.5.0), ch.sbb:spring-cloud-stream-binder-solace (>=5.0.5, <=9.3.0) +466 more potentially affected by CVE-2026-59305 via org.springframework.cloud:spring-cloud-stream (>=4.2.0, <=5.0.2)

org.springframework.cloud:spring-cloud-stream MAVEN version =4.2.0, =17.16.0, =5.0.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =3.5.5.3, =3.4.0.0, =3.5.5.3, =3.5.5.3, =3.4.0.0, =3.4.0.0, =3.5.5.2 and more Source cves: CVE-2026-59305https://vulners.com/cve/C...

cn.structured:structure-audit-application (v2.0.0), cn.structured:structure-audit-infra (v2.0.0) +103 more potentially affected by CVE-2026-59272 via org.springframework.amqp:spring-rabbit (>=4.0.0-m1, <=4.0.4)

org.springframework.amqp:spring-rabbit MAVEN version =4.0.0-m1, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-59272 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAMQP-19267969...

am.ik.spring:spring-batch-migration-helper (0.2.0), com.github.ggreen:sql-task (0.0.1) +42 more potentially affected by CVE-2026-47878 via org.springframework.batch:spring-batch-core (>=6.0.0-m1, <=6.0.4)

org.springframework.batch:spring-batch-core MAVEN version =6.0.0-m1, =7.0.1, =1.8.0, =0.0.47, =0.0.47, =0.0.47, =1.1.0, =1.1.0, =1.1.0, =1.2.0 and more Source cves: CVE-2026-47878 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBATCH-19267918...

cn.structured:structure-audit-application (v2.0.0), cn.structured:structure-audit-infra (v2.0.0) +106 more potentially affected by CVE-2026-59275 via org.springframework.amqp:spring-amqp (>=4.0.0-m1, <=4.0.4)

org.springframework.amqp:spring-amqp MAVEN version =4.0.0-m1, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-59275 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAMQP-19267465...

cn.hdfk7.boot:hdfk7-boot-starter-common (4.0.0), com.avides.spring:spring-rabbit (5.0.0-rc1) +102 more potentially affected by CVE-2026-59272 via org.springframework.amqp:spring-rabbit (4.1.0)

org.springframework.amqp:spring-rabbit MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-rabbit and may be impacted: - cn.hdfk7.boot:hdfk7-boot-starter-common 4.0.0 - com.avides.spring:spring-rabbit...

org.eclipse.hawkbit:hawkbit-dmf-rabbitmq-test (1.1.0), org.springframework.amqp:spring-rabbit-test (4.1.0) +1 more potentially affected by CVE-2026-59271 via org.springframework.amqp:spring-rabbit-junit (4.1.0)

org.springframework.amqp:spring-rabbit-junit MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-rabbit-junit and may be impacted: - org.eclipse.hawkbit:hawkbit-dmf-rabbitmq-test 1.1.0 -...

io.gitee.gzcltech.job:job-spring-scheduler-starter-jdbc (>=4.0.0-rc3, <=4.2.4), io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.07) +36 more potentially affected by CVE-2026-59307 via org.springframework.integration:spring-integration-jdbc (>=6.4.0, <=7.0.5)

org.springframework.integration:spring-integration-jdbc MAVEN version =6.4.0, =4.0.0-rc3, =2025.02, =2025.02, =2025.02, =2025.02, =2025.02, =2025.02, =2025.02, =2025.02, =2025.02, =7.2.0-rc3, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =1.0.4 and more Source cves: CVE-2026-59307 Source advisory:...

org.apereo.cas:cas-server-support-jpa-ticket-registry (>=8.0.0-rc6, <=8.0.2), org.eclipse.hawkbit:hawkbit-ddi-server (1.1.0) +10 more potentially affected by CVE-2026-59307 via org.springframework.integration:spring-integration-jdbc (7.1.0)

org.springframework.integration:spring-integration-jdbc MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-jdbc and may be impacted: -...

ch.admin.bit.jeap:jeap-oauth-mock-server (>=3.1.0, <=3.9.3), ch.admin.bit.jeap:jeap-oauth-mock-server-instance (>=3.1.0, <=3.9.3) +30 more potentially affected by CVE-2026-59316 via org.springframework.security:spring-security-oauth2-authorization-server (>=1.4.0, <=1.4.8)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version =1.4.0, =3.1.0, =3.1.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =0.0.23, =0.0.2, =0.0.11, =1.0.0, =3.4.0, =1.2.7, =1.2.6, =2.12.0, =3.1.0 and more Source cves: CVE-2026-59316 Source advisory:...

ch.admin.bit.jeap:jeap-oauth-mock-server (>=3.10.0, <=3.50.0), ch.admin.bit.jeap:jeap-oauth-mock-server-instance (>=3.10.0, <=3.50.0) +49 more potentially affected by CVE-2026-59316 via org.springframework.security:spring-security-oauth2-authorization-server (>=1.5.0, <=1.5.8)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version =1.5.0, =3.10.0, =3.10.0, =1.0.0, =1.0.1, =1.0.0, =3.0.0, =3.5.5.3, =3.5.5.3, =3.5.0.0, =3.5.5.3, =3.5.5.3, =3.5.5.3, =3.5.0.0, =3.5.0.0, =3.5.5.2 and more Source cves: CVE-2026-59316 Source advisory:...

com.oracle.database.spring.cloud-stream-binder:spring-cloud-stream-binder-oracle-txeventq (>=0.20.0, <=0.21.0), com.solace.connector.core.io:spring-cloud-stream-binder-jms (5.0.1) +2 more potentially affected by CVE-2026-47880 via org.springframework.integration:spring-integration-jms (7.1.0)

org.springframework.integration:spring-integration-jms MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-jms and may be impacted: -...