org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40985 Source advisory: GHSA-9GGW-87M9-9GFC...

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview org.springframework.webflow:spring-webflow is a maven plugin for Spring Web Flow. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' via the WebFlowELExpressionParser...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=4.0.0-rc1, <=4.0.0)

org.springframework.webflow:spring-webflow MAVEN version =4.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc5 and more Source cves: CVE-2026-40985...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40985 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWEBFLOW-17315634...

CVE-2026-40985

Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1...

CVE-2026-41856 Spring GraphQL Annotation Detection Vulnerability

The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met, security annotations can be ignored...

EUVD-2026-36214

The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met, security annotations can be ignored...

CVE-2026-41856 Spring GraphQL Annotation Detection Vulnerability

The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met, security annotations can be ignored...

CVE-2026-41856 Spring GraphQL Annotation Detection Vulnerability

The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met, security annotations can be ignored...

com.github.vzakharchenko:bridge-forge-connect (>=1.0.1, <=1.0.2), com.graphql-java-generator:graphql-java-client-dependencies (>=3.0, <=3.1) +72 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=1.4.0, <=1.4.5)

org.springframework.graphql:spring-graphql MAVEN version =1.4.0, =1.0.1, =3.0, =3.0, =3.0, =3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.6.0 and more Source cves: CVE-2026-41856 Source advisory: MEN...

com.apollographql.federation:federation-spring-subscription-callback (>=6.0.0, <=6.2.1), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0, <=4.0.2) +53 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=2.0.0, <=2.0.3)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0, =6.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter 1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources 1.4.0 -...

CVE-2026-41856

CVE-2026-41856 affects Spring GraphQL’s annotation detection for @Controller data fetchers, where resolution of annotations in type hierarchies may be incorrect. This can lead to security annotations being ignored at runtime when all conditions are met and annotations are used for authorization d...

CVE-2026-41856

The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met, security annotations can be ignored...

EUVD-2026-36213

Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim's credentials...

CVE-2026-41700

Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim's credentials...

CVE-2026-41700 Cross-Site WebSocket Hijacking in Spring for GraphQL

Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim's credentials...

CVE-2026-41700 Cross-Site WebSocket Hijacking in Spring for GraphQL

Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim's credentials...

CVE-2026-41700 Cross-Site WebSocket Hijacking in Spring for GraphQL

Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim's credentials...

CVE-2026-41700

Spring for GraphQL with WebSocket transport is affected by Cross-Site WebSocket Hijacking. Affected versions: Spring for GraphQL 2.0.0–2.0.3; 1.4.0–1.4.5; 1.3.0–1.3.8; 1.0.0–1.0.6. Description confirms the issue: an attacker can lure an authenticated user to a malicious page to execute arbitrary ...