am.ik.home:uaa-client (>=1.3.0, <=1.8.1), am.ik.home:uaa-integration-test (>=1.3.0, <=1.8.1) +1025 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.3.6.release)

org.springframework:spring-core MAVEN version 4.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =0.0.1, =0.2.0, =1.0.6, =0.1, =0.1.1, =0.1....

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +371 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.2.8.release)

org.springframework:spring-core MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

ch.sbb.releasetrain:action (0.0.25), ch.sbb.releasetrain:config (0.0.25) +675 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.2.7.release)

org.springframework:spring-core MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ch.sbb.releasetrain:action 0.0.25 - ch.sbb.releasetrain:config 0.0.25 -...

ch.ralscha:extdirectspring (>=1.0.0, <=1.0.1), com.alexkasko.installer:maven-windows-service-installer-plugin (>=1.0.2, <=1.0.6) +264 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.0.3.release)

org.springframework:spring-core MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ch.ralscha:extdirectspring =1.0.0, =1.0.2, =4.0.0, =22.0.2-beta, =3.0.2, =1.1.0-rc2,...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +1188 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.2.5.release)

org.springframework:spring-expression MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...

com.github.junitrunner:junitrunner-unitils (>=0.0.1, <=0.0.2), com.sun.jersey:jersey-spring (0.8-ea) +98 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.5.2)

org.springframework:spring-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.github.junitrunner:junitrunner-unitils =0.0.1, =0.1, =3.2.0-rc1, =3.2.0-rc1, =3.2.0-rc1,...

ca.grimoire:mainspring (>=1.0, <=1.0.4), ch.abertschi.arquillian:arquillian-extension-aspectj (>=0.0.1-alpha1, <=0.0.1-alpha5) +1386 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.5.6)

org.springframework:spring-core MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ca.grimoire:mainspring =1.0, =0.0.1-alpha1, =2.1.0, =1.2.0, =3.0.0, =3.0.0, =3.0.0, =1.0.3, =1.0....

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), cn.ymotel:largedatabtach (>=1.0.1, <=1.0.4) +705 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.3.20.release)

org.springframework:spring-core MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 - cn.ymotel:largedatabtach...

at.molindo.social:spring-social-security (1.1.4.release), cc.ecore:spring-jfinal (0.0.1) +166 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.2.13.release)

org.springframework:spring-core MAVEN version 3.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - at.molindo.social:spring-social-security 1.1.4.release - cc.ecore:spring-jfinal 0.0.1 -...

club.easy-utils:easy-wepay (>=0.0.1-snaoshot, <=0.0.2-snaoshot), club.easy-utils:easy-weprogram (>=0.0.1-snaoshot, <=1.0.2.1) +69 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (3.2.17.release)

org.springframework:spring-expression MAVEN version 3.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - club.easy-utils:easy-wepay =0.0.1-snaoshot, =0.0.1-snaoshot, =1.2, =1.0.0,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +16455 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (>=6.1.0, <=6.1.21)

org.springframework:spring-expression MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0-beta.2 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 and more Source cves:...

at.molindo:spring-data-custom (0.1.0), be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6) +1117 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.3.4.release)

org.springframework:spring-expression MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:spring-data-custom 0.1.0 - be.looorent:jflu-producer-springmvc =0....

au.com.centrumsystems:build-pipeline-plugin (1.0), ch.ethz.origo:origo-issue-notifier (1.0) +1113 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.5)

org.springframework:spring-core MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - au.com.centrumsystems:build-pipeline-plugin 1.0 - ch.ethz.origo:origo-issue-notifier 1.0 -...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), ch.ralscha:extdirectspring (1.3.9) +336 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.2.5.release)

org.springframework:spring-core MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =1.2.4, =0.4.0, =1.1.0, =0.0.1, =0.0.3, =0.0.25 -...

at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-core (1.1.0.release) +374 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.0.3.release)

org.springframework:spring-core MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release - at.molindo.social:spring-social-co...

au.com.mountain-pass:hyperstate (>=4, <=9), be.nille.jwt:jwt-aspect (1.0.0) +970 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.2.6.release)

org.springframework:spring-expression MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.0.21, =0.0.21, =0.0.21, =0.0.21,...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +320 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (4.2.8.release)

org.springframework:spring-expression MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

net.sourceforge.openutils:openutils-bshd5 (0.3), net.sourceforge.openutils:openutils-spring (0.2) +1 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (2.0-m5)

org.springframework:spring-core MAVEN version 2.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - net.sourceforge.openutils:openutils-bshd5 0.3 - net.sourceforge.openutils:openutils-spring 0.2 -...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.5), com.coherentlogic.coherent.data-model:data-model-core (>=1.0.13-release, <=1.0.14-release) +102 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.0.1.release)

org.springframework:spring-core MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =1.0.13-release, =1.0.13-release,...

com.github.skeychen:dswork-common-ssosdk (>=9.0.1, <=9.1.1), com.github.skeychen:dswork-config (>=9.0.1, <=9.1.1) +131 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (4.3.28.release)

org.springframework:spring-core MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.github.skeychen:dswork-common-ssosdk =9.0.1, =9.0.1, =9.0.1, =9.0.1, =9.0.1, =9.0.1,...