br.com.thiagomoreira.replicon:replicon4j (>=0.1, <=1.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.6) +469 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.0.6.release)

org.springframework:spring-expression MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.thiagomoreira.replicon:replicon4j =0.1, =3.0.3, =3.0.3, =3.0.3, =3.0.5...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +156 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.0.8.release)

org.springframework:spring-expression MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 -...

br.com.anteros:anteros-spring-swagger (1.0.0), club.javafamily:javafamily-rest (>=0.1.0.release, <=0.1.1.release) +379 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.0.9.release)

org.springframework:spring-expression MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.anteros:anteros-spring-swagger 1.0.0 - club.javafamily:javafamily-rest...

be.bagofwords:bow-utils (>=1.0, <=1.1.15), br.com.anteros:anteros-jsondoc-maven-plugin (1.0.0) +116 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.1.0.release)

org.springframework:spring-expression MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.bagofwords:bow-utils =1.0, =0.7, =1.3.8, =0.0.1, =2.0.17, =0.0.1-release,...

ch.ralscha:extdirectspring (1.5.0), cn.enilu:flash-core (1.0) +136 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.1.2.release)

org.springframework:spring-expression MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.ralscha:extdirectspring 1.5.0 - cn.enilu:flash-core 1.0 -...

br.ufc.quixada.npi:npi-core-api (0.1.0), ch.ralscha:extdirectspring (1.5.1) +539 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.1.4.release)

org.springframework:spring-expression MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.ufc.quixada.npi:npi-core-api 0.1.0 - ch.ralscha:extdirectspring 1.5.1 -...

at.rocklogic.kafka:object-support (>=0.2, <=1.1), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.0) +563 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.1.5.release)

org.springframework:spring-expression MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.rocklogic.kafka:object-support =0.2, =0.1.0, =1.3.5 -...

ba.jamax.util:jamax-rest (>=1.3.1-release, <=1.3.4-release), be.dnsbelgium:rdap-server (1.1.0) +1133 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.1.6.release)

org.springframework:spring-expression MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ba.jamax.util:jamax-rest =1.3.1-release, =0.0.6, =1.0.0, =0.1.0, =0.1.5,...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-core (1.1.4.release) +431 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.1.8.release)

org.springframework:spring-expression MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

ca.islandora.alpaca:islandora-connector-broadcast (>=0.2.0, <=0.3.0), ca.islandora.alpaca:islandora-indexing-triplestore (0.1.0) +545 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.1.9.release)

org.springframework:spring-expression MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.islandora.alpaca:islandora-connector-broadcast =0.2.0, =1.0.0, =2.0.0-rc2,...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.4-rc.0, <=3.5.18) +195 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.2.0.release)

org.springframework:spring-expression MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.4.0, =3.5.4-rc.0, =1.0.0,...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +716 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.2.3.release)

org.springframework:spring-expression MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter =0.1.6,...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +1188 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.2.5.release)

org.springframework:spring-expression MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +320 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.2.8.release)

org.springframework:spring-expression MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

com.17jee:e-core-query (>=3.0.0, <=3.0.1.11), com.17jee:e-core-query-ext (>=3.0.0, <=3.0.1.11) +168 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.2.9.release)

org.springframework:spring-expression MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.17jee:e-core-query =3.0.0, =3.0.0, =3.0.1.5, =3.0.1.7, =2.0.4, =2.1, =1.1...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +166 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.3.0.release)

org.springframework:spring-expression MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +348 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.3.1.release)

org.springframework:spring-expression MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =2.0, =2.1.0-release,...

cn.easyproject:easycommondao-hibernate3 (>=1.1.0-release, <=1.4.0-release), cn.easyproject:easycommondao-hibernate4 (>=1.1.0-release, <=1.4.0-release) +1995 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.3.3.release)

org.springframework:spring-expression MAVEN version 4.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.easyproject:easycommondao-hibernate3 =1.1.0-release, =1.1.0-release,...

at.molindo:spring-data-custom (0.1.0), be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6) +1117 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.3.4.release)

org.springframework:spring-expression MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:spring-data-custom 0.1.0 - be.looorent:jflu-producer-springmvc =0....

at.molindo:spring-data-custom (1.0.0), at.researchstudio.sat:won-core (>=0.2, <=0.3) +1447 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.3.8.release)

org.springframework:spring-expression MAVEN version 4.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:spring-data-custom 1.0.0 - at.researchstudio.sat:won-core =0.2,...