com.ahome-it:ahome-tooling-server-core (>=1.1.5-release, <=1.1.9-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.5-release, <=1.1.9-release) +54 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.1.2.release)

org.springframework.security:spring-security-web MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.5-release,...

ch.sahits.game:openpatriciantest (>=1.0.0, <=1.0.1), com.alipay.sofa:sofa-tracer-mongodb-plugin (>=3.1.0, <=3.1.2) +22 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =1.0.0, =3.1.0, =2.1.0.release...

com.bol:spring-data-mongodb-encrypt (>=2.0.0, <=2.3), com.github.apavlidi:restfulqueries (0.0.1) +5 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bol:spring-data-mongodb-encrypt =2.0.0, =2.0.6.6, =1.0.2,...

cloud.altemista.fwk.persistence:cloud-altemistafwk-core-persistence-mongodb-conf (>=3.0.0.release, <=3.0.1.release), com.github.paulcwarren:content-mongo-spring-boot-starter (>=0.3.0, <=0.4.0) +18 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

com.github.eagle6688:devutility.external.mongo (>=2.0.6.1, <=2.0.6.4), com.github.krraghavan:mongodb-aggregate-query-support-reactive (>=0.8.0, <=0.8.4) +15 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.eagle6688:devutility.external.mongo =2.0.6.1, =0.8.0...

ch.sahits.game:openpatriciantest (>=0.9.1-rc1, <=0.9.1), cn.minsin:mutils-data-mongodb (>=0.0.2.release, <=0.4.0.release) +14 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =0.9.1-rc1, =0.0.2.release,...

com.keyholesoftware:khs-sherpa-spring (>=1.2.0, <=1.2.1), org.codehaus.spring-security-oauth:spring-security-oauth (>=3.9.ss3, <=3.11.ss3) +9 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.0.0.release)

org.springframework.security:spring-security-web MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.keyholesoftware:khs-sherpa-spring =1.2.0, =3.9.ss3,...

fr.xebia.springframework:xebia-spring-security-extras (>=1.1.4, <=1.1.6), org.appfuse:appfuse-jsf (2.1.0-m2) +27 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.0.4.release)

org.springframework.security:spring-security-web MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - fr.xebia.springframework:xebia-spring-security-extras...

com.github.cwilper.fcrepo-cloudsync:fcrepo-cloudsync-service (>=1.0.0-beta-1, <=1.0.0), com.github.lltyk:tapestry-spring-security (>=3.0.2, <=3.0.3) +128 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.0.5.release)

org.springframework.security:spring-security-web MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

com.sdl.delivery:udp-service-container-core (>=11.0.0-1078, <=11.0.1-1016), org.springframework.security:spring-security-cas (4.2.16.release) +3 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.16.release)

org.springframework.security:spring-security-web MAVEN version 4.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.sdl.delivery:udp-service-container-core...

com.github.fosin:cdp-oauth2 (1.0.0), com.sap.cloud.lm.sl.cf:com.sap.cloud.lm.sl.cf.client (>=1.65.4, <=1.67.1) +101 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.8.release)

org.springframework.security:spring-security-web MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.fosin:cdp-oauth2 1.0.0 -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +101 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.9.release)

org.springframework.security:spring-security-web MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

am.ik.home:uaa-client (>=1.3.0, <=1.8.1), am.ik.home:uaa-integration-test (>=1.3.0, <=1.8.1) +86 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.1.release)

org.springframework.security:spring-security-web MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =0.2.0,...

am.ik.home:uaa-client (1.9.0), am.ik.home:uaa-integration-test (1.9.0) +410 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.2.release)

org.springframework.security:spring-security-web MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client 1.9.0 -...

at.researchstudio.sat:won-cryptography (0.3), at.researchstudio.sat:won-matcher (0.3) +728 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.3.release)

org.springframework.security:spring-security-web MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - at.researchstudio.sat:won-cryptography 0.3 -...

com.foreach.imageserver:imageserver-admin (5.0.0.release), com.foreach.imageserver:imageserver-test-embedded (5.0.0.release) +66 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.10.release)

org.springframework.security:spring-security-web MAVEN version 4.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.foreach.imageserver:imageserver-admin 5.0.0.releas...

au.org.consumerdatastandards:client-cli (>=1.1.1, <=1.12.0), com.atlassian.asap:asap-server-spring-security (>=2.21.8, <=2.21.9) +107 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.11.release)

org.springframework.security:spring-security-web MAVEN version 4.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - au.org.consumerdatastandards:client-cli =1.1.1, =2.21....

cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1) +90 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.5.release)

org.springframework.security:spring-security-web MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - cn.home1:spring-cloud-config-server =0.0.1, =0.0.1,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.11), ch.sharedvd.tipi:tipi-engine (>=1.1.10, <=1.1.11) +138 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.7.release)

org.springframework.security:spring-security-web MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

com.addc:addc-svr-mvc (>=2.6, <=2.9), com.addc:addc-web-mvc (>=2.6, <=2.9) +93 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.12.release)

org.springframework.security:spring-security-web MAVEN version 4.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.addc:addc-svr-mvc =2.6, =2.6, =2.6, =4.1.2, =4.1.2...