ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41846 Source advisory: GHSA-957G-F97V-VPPC...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41846 Source advisory: OSV:GHSA-957G-F97V-VPPC...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.3), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2815 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41846 Source advisory: GHSA-957G-F97V-VPPC...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.3), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2815 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41846 Source advisory: OSV:GHSA-957G-F97V-VPPC...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.3), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2815 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

africa.absa:inception-application (>=1.0.0, <=1.2.0), africa.absa:inception-test (>=1.0.0, <=1.2.0) +2979 more potentially affected by CVE-2026-41853 via org.springframework:spring-webflux (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webflux MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =0.0.1, =v0.3.12, =v0.3.10, =v0.3.12, =2.1.2.release, =4.1.27, =4.1.7, =4.7.5 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 and more Sourc...

africa.absa:inception-application (>=1.0.0, <=1.2.0), africa.absa:inception-test (>=1.0.0, <=1.2.0) +2979 more potentially affected by CVE-2026-41847 via org.springframework:spring-webflux (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webflux MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =0.0.1, =v0.3.12, =v0.3.10, =v0.3.12, =2.1.2.release, =4.1.27, =4.1.7, =4.7.5 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 and more Sourc...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +2349 more potentially affected by CVE-2026-41853 via org.springframework:spring-webflux (>=6.2.0, <=6.2.18)

org.springframework:spring-webflux MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

org.apache.cxf:cxf-systests (>=2.0.6, <=2.1), org.apache.servicemix.bundles:org.apache.servicemix.bundles.jencks (2.1_1) +55 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.0.6)

org.springframework:spring-jms MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf:cxf-systests =2.0.6, =3.2, =3.2, =3.2, =3.2, =1.0-m1, =3.2, =3.2, =3.2, =3.2, =3.2,...

org.apache.cxf.systests:cxf-systests-transports (>=2.1.7, <=2.1.10), org.apache.cxf.systests:cxf-systests-uncategorized (>=2.1.7, <=2.1.10) +19 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.0.8)

org.springframework:spring-jms MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports =2.1.7, =2.1.7, =2.0.10, =2.0.10, =2.0.10, =2.0.10,...

org.apache.activemq:apache-activemq (5.1.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.1)

org.springframework:spring-jms MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.activemq:apache-activemq 5.1.0 Source cves: CVE-2026-41855 Source advisory:...

org.springframework.ws:spring-ws-support (1.5.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.2)

org.springframework:spring-jms MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.ws:spring-ws-support 1.5.0 Source cves: CVE-2026-41855 Source advisory:...

org.springframework.ws:spring-ws-support (>=1.5.1, <=1.5.3) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.4)

org.springframework:spring-jms MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.ws:spring-ws-support =1.5.1, =1.5.3 Source cves: CVE-2026-41855 Source advisory...

org.apache.activemq:activemq-camel (5.2.0), org.apache.activemq:activemq-web (5.2.0) +43 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.5)

org.springframework:spring-jms MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.activemq:activemq-camel 5.2.0 - org.apache.activemq:activemq-web 5.2.0 -...

com.netas.jmeter:com.netas.jmeter.gradle.plugin (>=1.0.0-2.13, <=1.0.3-2.13), gradle.plugin.com.netas.jmeter:jmeter-gradle-plugin (>=1.0.0-2.13, <=1.0.3-2.13) +98 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6)

org.springframework:spring-jms MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.netas.jmeter:com.netas.jmeter.gradle.plugin =1.0.0-2.13, =1.0.0-2.13, =1.0.5-2.13, =1.1.3, =0.1...

org.apache.servicemix.examples:org.apache.servicemix.examples.itests.tests (4.2.0), org.apache.servicemix.jbi.cluster:org.apache.servicemix.jbi.cluster.requestor (1.2.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec01)

org.springframework:spring-jms MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.servicemix.examples:org.apache.servicemix.examples.itests.tests 4.2.0 -...

org.jboss.snowdrop:snowdrop (>=2.0.0.final, <=2.0.5.final), org.jboss.snowdrop:snowdrop-namespace (>=1.2.0.cr1, <=2.0.0.cr1) +7 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec02)

org.springframework:spring-jms MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.jboss.snowdrop:snowdrop =2.0.0.final, =1.2.0.cr1, =1.0, =0.7, =0.7, =0.8.1 -...

org.jboss.snowdrop:snowdrop (>=2.1.0.final, <=2.1.1.final) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec03)

org.springframework:spring-jms MAVEN version 2.5.6.sec03 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.jboss.snowdrop:snowdrop =2.1.0.final, =2.1.1.final Source cves: CVE-2026-41855 Source...

org.grails:grails-core (>=1.2.0.rc2, <=1.3.0), org.grails:grails-crud (>=1.2.0.rc2, <=1.3.0) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.0.0.release)

org.springframework:spring-jms MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.grails:grails-core =1.2.0.rc2, =1.2.0.rc2, =1.2.0.rc2, =1.2.0, =1.2.0.rc2, =1.2.0.rc2,...