com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring-boot-starter (>=2.3.12, <=2.3.20) +40 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.3.29.release)

org.springframework:spring-webmvc MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.fangjinuo.audit:audit-spring =2.3.12, =2.3.12, =4.0.1, =3.0.0, =3.0.0,...

com.51degrees:device-detection (>=4.4.1, <=4.4.2), com.51degrees:geo-location.web.examples.mvc (>=4.3.10, <=4.3.11) +132 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.3.30.release)

org.springframework:spring-webmvc MAVEN version 4.3.30.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.51degrees:device-detection =4.4.1, =4.3.10, =4.3.10, =4.3.14, =4.3.14, =4.3.14,...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +19631 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-41846 Source advisory: OSV:GHSA-957G-F97V-VPPC...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +19631 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +19631 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-41846 Source advisory: GHSA-957G-F97V-VPPC...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +6504 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.21)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41846 Source advisory: OSV:GHSA-957G-F97V-VPPC...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +6504 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.21)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41846 Source advisory: GHSA-957G-F97V-VPPC...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41846 Source advisory: GHSA-957G-F97V-VPPC...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41846 Source advisory: OSV:GHSA-957G-F97V-VPPC...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.3), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2815 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41846 Source advisory: GHSA-957G-F97V-VPPC...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.3), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2815 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41846 Source advisory: OSV:GHSA-957G-F97V-VPPC...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.3), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2815 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

africa.absa:inception-application (>=1.0.0, <=1.2.0), africa.absa:inception-test (>=1.0.0, <=1.2.0) +2979 more potentially affected by CVE-2026-41853 via org.springframework:spring-webflux (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webflux MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =0.0.1, =v0.3.12, =v0.3.10, =v0.3.12, =2.1.2.release, =4.1.27, =4.1.7, =4.7.5 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 and more Sourc...

africa.absa:inception-application (>=1.0.0, <=1.2.0), africa.absa:inception-test (>=1.0.0, <=1.2.0) +2979 more potentially affected by CVE-2026-41847 via org.springframework:spring-webflux (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webflux MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =0.0.1, =v0.3.12, =v0.3.10, =v0.3.12, =2.1.2.release, =4.1.27, =4.1.7, =4.7.5 - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 and more Sourc...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +2349 more potentially affected by CVE-2026-41853 via org.springframework:spring-webflux (>=6.2.0, <=6.2.18)

org.springframework:spring-webflux MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +1061 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=5.0.0.release, <=5.3.39)

org.springframework:spring-jms MAVEN version =5.0.0.release, =1.0.1, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =4.2.0, =4.7.0 and more Source cves: CVE-2026-41855https://vulners.com/cve/CVE-2026-4...

be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-amqp (2.12.0), com.almis.awe.clients:test-react (>=0.0.11, <=1.0.5) +643 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.0.0, <=6.1.21)

org.springframework:spring-jms MAVEN version =6.0.0, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.11.2 and more Source cves: CVE-2026-41855 Source advisory: GHSA-X863-P983-P4F7...

com.almis.awe:awe-annotation (>=4.11.3, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.3, <=4.12.0) +627 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.2.0, <=6.2.18)

org.springframework:spring-jms MAVEN version =6.2.0, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.12.0 and more Source cves: CVE-2026-41855 Source advisory: GHSA-X863-P983-P4F7...

com.atomikos:transactions-spring-boot4 (6.0.1), com.atomikos:transactions-spring-boot4-integration-tests (6.0.1) +427 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=7.0.0-m7, <=7.0.7)

org.springframework:spring-jms MAVEN version =7.0.0-m7, =7.0.0-beta.1, =3.0.0, =4.0.0-m2, =4.0.0-m2, =0.17.0, =26.1.0, =2.0.0, =2.5.0 - io.kaoto.forage:forage-jms 1.5.0 and more Source cves: CVE-2026-41855 Source advisory: GHSA-X863-P983-P4F7...