org.springframework:spring-hibernate (1.2.2), org.springframework:spring-orm (1.2.2) +1 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (1.2.2)

org.springframework:spring-webmvc MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-orm 1.2.2 -...

cn.chenzw.swagger:swagger-ext-all (1.0.1), cn.chenzw.swagger:swagger-ext-core (1.0.1) +216 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.24.release)

org.springframework:spring-webmvc MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.chenzw.swagger:swagger-ext-all 1.0.1 - cn.chenzw.swagger:swagger-ext-core 1.0.1 -...

com.exadel.flamingo.maven.plugin:flamingoapp (>=1.0.0, <=1.5.0), org.acegisecurity:acegi-security (>=1.0.1, <=1.0.2) +19 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (1.2.7)

org.springframework:spring-webmvc MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.exadel.flamingo.maven.plugin:flamingoapp =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1,...

ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.27), ch.ralscha:extdirectspring (>=1.0.14, <=1.1.3) +84 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.0.7.release)

org.springframework:spring-webmvc MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ar.com.jmfsg:api-doc =0.0.20, =1.0.14, =3.0.10, =3.0.10, =1.2.2, =1.4.1, =3.0.0,...

com.cjoop:platform-core (0.0.1.release), com.cjoop:platform-security (0.0.1.release) +228 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.16.release)

org.springframework:spring-websocket MAVEN version 4.3.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.cjoop:platform-core 0.0.1.release - com.cjoop:platform-security...

com.github.ptomli.bedrock:bedrock-core (1.0.0), com.isotrol.impe3.extensions:impe3-pms-ldap (>=3.0.0, <=3.1.1) +167 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (1.3.1.release)

org.springframework.ldap:spring-ldap-core MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ldap:spring-ldap-core and may be impacted: - com.github.ptomli.bedrock:bedrock-core 1.0.0 -...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.1.0), com.daioware.security:security (1.0.0.release) +160 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (1.3.2.release)

org.springframework.ldap:spring-ldap-core MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ldap:spring-ldap-core and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =1.5.2, =0.3.1, =0.2.0, =0.2.0,...

ai.h2o:h2o-orc-parser (>=3.10.0.5, <=3.10.3.6), cc.chensoul.nacos:core-test (2.5.2) +708 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=2.0.0.release, <=2.4.4)

org.springframework.ldap:spring-ldap-core MAVEN version =2.0.0.release, =3.10.0.5, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.286, =8.1.0.567.22 and more Source cves: CVE-2026-41720 Source advisory: OSV:GHSA-JRV5-8W28-4265...

com.erudika:para-jar (>=1.51.2, <=1.51.4), com.erudika:para-server (>=1.51.2, <=1.54.7) +57 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=4.0.0, <=4.0.3)

org.springframework.ldap:spring-ldap-core MAVEN version =4.0.0, =1.51.2, =1.51.2, =0.2.2, =2.0.0, =2.0.0, =3.2.1, =3.2.1, =3.2.1, =2.5.0, =2.4.0, =2.4.0, =2.5.2 and more Source cves: CVE-2026-41720 Source advisory: OSV:GHSA-JRV5-8W28-4265...

com.ebay:lightning-client (0.9.0), com.ebay:lightning-core (0.9.0) +1 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.0.3.release)

org.springframework:spring-websocket MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ebay:lightning-client 0.9.0 - com.ebay:lightning-core 0.9.0 -...

org.springframework.boot:spring-boot-starter-websocket (>=1.1.9.release, <=1.1.10.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.0.8.release)

org.springframework:spring-websocket MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.9.release,...

org.springframework.boot:spring-boot-starter-websocket (>=1.1.11.release, <=1.1.12.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.0.9.release)

org.springframework:spring-websocket MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.11.release,...

com.github.demon214:dstudio.web (>=0.0.1, <=1.0.5), com.github.tianjing:tgtools.activiti.explorer (>=5.22.0.14, <=5.22.0.16) +11 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.1.5.release)

org.springframework:spring-websocket MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.github.demon214:dstudio.web =0.0.1, =5.22.0.14, =5.22.0.6, =1.0.4, =2.2.1.8...

de.fhg.fokus.nubomedia:nubomedia-media-client (>=1.0, <=6.6.0), org.springframework.boot:spring-boot-starter-websocket (1.2.7.release) +1 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.1.8.release)

org.springframework:spring-websocket MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - de.fhg.fokus.nubomedia:nubomedia-media-client =1.0, =4.1.7.release,...

org.springframework.boot:spring-boot-starter-websocket (1.2.8.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.1.9.release)

org.springframework:spring-websocket MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.2.8.release Source cve...

com.ahome-it:ahome-tooling-server-core (1.0.109-release), com.ahome-it:ahome-tooling-server-hazelcast (1.0.109-release) +8 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.0.release)

org.springframework:spring-websocket MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.0.109-release -...

com.ahome-it:ahome-tooling-server-core (>=1.0.110-release, <=1.0.120-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.111-release, <=1.0.120-release) +10 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.1.release)

org.springframework:spring-websocket MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.0.110-release, =1.0.111-release,...

com.ahome-it:ahome-tooling-server-core (1.0.121-release), com.ahome-it:ahome-tooling-server-hazelcast (1.0.121-release) +5 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.2.release)

org.springframework:spring-websocket MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.0.121-release -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.4) +13 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.4.release)

org.springframework:spring-websocket MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.4 -...

com.ahome-it:ahome-tooling-server-core (>=1.1.0-release, <=1.1.1-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.0-release, <=1.1.1-release) +12 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.6.release)

org.springframework:spring-websocket MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.0-release, =1.1.0-release,...