be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-amqp (2.12.0), com.almis.awe.clients:test-react (>=0.0.11, <=1.0.5) +643 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.0.0, <=6.1.21)

org.springframework:spring-jms MAVEN version =6.0.0, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.11.2 and more Source cves: CVE-2026-41855 Source advisory: GHSA-X863-P983-P4F7...

com.almis.awe:awe-annotation (>=4.11.3, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.3, <=4.12.0) +627 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.2.0, <=6.2.18)

org.springframework:spring-jms MAVEN version =6.2.0, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.12.0 and more Source cves: CVE-2026-41855 Source advisory: GHSA-X863-P983-P4F7...

com.almis.awe:awe-annotation (>=4.11.3, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.3, <=4.12.0) +627 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.2.0, <=6.2.18)

org.springframework:spring-jms MAVEN version =6.2.0, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.12.0 and more Source cves: CVE-2026-41855 Source advisory: OSV:GHSA-X863-P983-P4F7...

com.atomikos:transactions-spring-boot4 (6.0.1), com.atomikos:transactions-spring-boot4-integration-tests (6.0.1) +427 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=7.0.0-m7, <=7.0.7)

org.springframework:spring-jms MAVEN version =7.0.0-m7, =7.0.0-beta.1, =3.0.0, =4.0.0-m2, =4.0.0-m2, =0.17.0, =26.1.0, =2.0.0, =2.5.0 - io.kaoto.forage:forage-jms 1.5.0 and more Source cves: CVE-2026-41855 Source advisory: GHSA-X863-P983-P4F7...

be.jacobsvanroy:spring-sql-unit (>=0.7, <=0.8), br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2) +96 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.0.0.release)

org.springframework:spring-expression MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.jacobsvanroy:spring-sql-unit =0.7, =1.2.1, =1.2.10, =1.0.0, =1.0-27,...

com.github.inspektr:inspektr-support-spring (1.0.0.ga), fr.figarocms:web-debug-tag (>=0.0.1, <=1.0) +57 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.0.1.release)

org.springframework:spring-expression MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.github.inspektr:inspektr-support-spring 1.0.0.ga -...

br.com.tecsinapse:glimpse-server (>=1.1.1, <=1.1.2), com.alexkasko.springjdbc.typedqueries:typed-queries-codegen (>=1.0, <=1.4.4) +89 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.0.2.release)

org.springframework:spring-expression MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.tecsinapse:glimpse-server =1.1.1, =1.0, =1.0, =1.0, =1.0, =1.0, =1.0.0...

ch.ralscha:extdirectspring (>=1.0.0, <=1.0.1), com.enigmastation:ci-bayes (2.0.0.release) +296 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.0.3.release)

org.springframework:spring-expression MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.ralscha:extdirectspring =1.0.0, =4.0.0, =22.0.2-beta, =1.0.0-beta-1, =3.0....

at.molindo:molindo-notify (>=1.0.0-alpha-1, <=1.0.0-alpha-2), ca.grimoire.spring:spring-request-aware (1.0) +232 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.0.4.release)

org.springframework:spring-expression MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:molindo-notify =1.0.0-alpha-1, =1.0.2, =1.1.1, =1.0.3, =1.0.1,...

ch.hsr.mas.oms-financialanalyzer:indicators (1.2.0), ch.hsr.mas.oms-financialanalyzer:oms-api (1.2.0) +456 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.1.1.release)

org.springframework:spring-expression MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.hsr.mas.oms-financialanalyzer:indicators 1.2.0 -...

ch.inftec.ju:ju-dbutil-test-legacy (4.1), ch.ralscha:extdirectspring (>=1.3.0, <=1.3.1) +171 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.1.release)

org.springframework:spring-expression MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.inftec.ju:ju-dbutil-test-legacy 4.1 - ch.ralscha:extdirectspring =1.3.0,...

com.blogspot.ostas:jamaexamplewebapp (>=1.0.1, <=1.0.2), com.github.bluejoe2008:elfinder-servlet-2 (>=1.0, <=1.2) +439 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.3.release)

org.springframework:spring-expression MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.blogspot.ostas:jamaexamplewebapp =1.0.1, =1.0, =1.0.0, =1.0.1, =1.2.1 and...

cc.concurrent:config-server (0.1), ch.ralscha:extdirectspring (>=1.3.6, <=1.3.8) +467 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.4.release)

org.springframework:spring-expression MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cc.concurrent:config-server 0.1 - ch.ralscha:extdirectspring =1.3.6, =1.0.2,...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cedarsoftware:json-command-servlet (>=1.0.0, <=1.1.2) +179 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.6.release)

org.springframework:spring-expression MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...

com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4) +62 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.7.release)

org.springframework:spring-expression MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.alibaba.citrus:citrus-springext-all =3.1.6, =3.1.6, =3.1.6, =0.10.0,...

cn.weforward:weforward-data-mysql (>=1.1.0, <=1.2.17), com.alibaba.otter:canal.client (>=1.0.25, <=1.1.0) +345 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.9.release)

org.springframework:spring-expression MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.weforward:weforward-data-mysql =1.1.0, =1.0.25, =1.0.25, =1.0.25, =1.0.25,...

com.elibom:jogger (>=0.2.0, <=0.2.1), com.github.qiujiayu:autoload-cache (>=1.3, <=4.11) +133 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.10.release)

org.springframework:spring-expression MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.elibom:jogger =0.2.0, =1.3, =4.1, =1.0.0.release, =1.0.0.release, =1.0.2...

com.geodevv.testing:irmina (>=1.0.0, <=1.0.2), com.github.dblock.waffle:waffle-spring-security3 (1.7.3) +105 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.12.release)

org.springframework:spring-expression MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.geodevv.testing:irmina =1.0.0, =2.5.0, =1.2.3, =1.4.19 and more Source...

at.molindo.social:spring-social-security (1.1.4.release), cc.ecore:spring-jfinal (0.0.1) +145 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.13.release)

org.springframework:spring-expression MAVEN version 3.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo.social:spring-social-security 1.1.4.release -...

com.free-now.apis:phrase-java-client (>=1.0.8, <=3.0.0), com.free-now.maven.plugins:phrase-plugin (>=2.0.0, <=2.1.0) +79 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.15.release)

org.springframework:spring-expression MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.free-now.apis:phrase-java-client =1.0.8, =2.0.0, =2.0.1, =2.0.1, =3.1.0,...