au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.4-rc.0, <=3.5.18) +77 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.2.0.release)

org.springframework:spring-webmvc MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.4.0, =3.5.4-rc.0, =0.0.1, =0.1, =0.0.1,...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.4-rc.0, <=3.5.18) +77 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.2.0.release)

org.springframework:spring-webmvc MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.4.0, =3.5.4-rc.0, =0.0.1, =0.1, =0.0.1,...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-security (1.1.4.release) +178 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.1.8.release)

org.springframework:spring-webmvc MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +2349 more potentially affected by CVE-2026-41841 via org.springframework:spring-webflux (>=6.2.0, <=6.2.18)

org.springframework:spring-webflux MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-41841 Source advisory: OSV:GHSA-MQ64-J8F9-9GCJ...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41843 Source advisory: GHSA-72PG-X5F8-J25J...

com.epam.reportportal:agent-java-cucumber (2.6.1), com.epam.reportportal:agent-java-jbehave (2.6.0) +29 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (0.18.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.18.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - com.epam.reportportal:agent-java-cucumber 2.6.1 -...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +850 more potentially affected by CVE-2026-41840 via org.springframework:spring-webflux (>=7.0.0, <=7.0.7)

org.springframework:spring-webflux MAVEN version =7.0.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0-beta.3, =4.7.5 - ch.rasc:wamp2spring-reactive 4.0.0 and more Source cves: CVE-2026-41840 Source advisory: OSV:GHSA-83F7-V6PX-PP3H...

com.github.edgar615:spring-boot-util-jwt (>=0.0.1, <=0.0.2), com.github.edgar615:spring-boot-util-web (>=0.1.0, <=0.1.3) +160 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.2.8.release)

org.springframework:spring-webmvc MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.edgar615:spring-boot-util-jwt =0.0.1, =0.1.0, =2.0, =2.0.0, =3.0.0-rc.26,...

net.jawr.extensions:jawr-spring-extension (3.6), net.jawr.tools:jawr-ant (1.6) +11 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (2.0.8)

org.springframework:spring-webmvc MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.jawr.extensions:jawr-spring-extension 3.6 - net.jawr.tools:jawr-ant 1.6 -...

ar.com.jmfsg:api-doc (>=0.0.28, <=0.0.34), ch.ralscha:extdirectspring (>=1.3.2, <=1.3.5) +102 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.2.2.release)

org.springframework:spring-webmvc MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ar.com.jmfsg:api-doc =0.0.28, =1.3.2, =1.0.5-release, =0.9.12, =0.9.12, =0.9.12,...

au.com.dius.pact.provider:spring (>=4.1.0, <=4.1.6), au.com.dius:pact-jvm-provider-spring (>=4.0.0-beta.1, <=4.0.10) +261 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.3.19.release)

org.springframework:spring-webmvc MAVEN version 4.3.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.dius.pact.provider:spring =4.1.0, =4.0.0-beta.1, =3.6.0-rc.1, =2.5.0, =2.5.0,...

ch.ralscha:extdirectspring (1.2.3), com.github.jknack:mwa-solr3 (>=0.3.4, <=0.3.11) +85 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (3.1.3.release)

org.springframework:spring-webmvc MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring 1.2.3 - com.github.jknack:mwa-solr3 =0.3.4, =0.3.4, =0.3.3...

com.consol.citrus:citrus-websocket (2.7.3), com.estafet.microservices.scrum:microservices-scrum-parent-db (>=1.0.0, <=1.0.4) +236 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.11.release)

org.springframework:spring-websocket MAVEN version 4.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.consol.citrus:citrus-websocket 2.7.3 -...

com.gitee.tanxianbo:mybatiscreatetable (1.0), com.pugwoo:spring-mvc-conf (0.0.6) +40 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.2.9.release)

org.springframework:spring-webmvc MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.gitee.tanxianbo:mybatiscreatetable 1.0 - com.pugwoo:spring-mvc-conf 0.0.6 -...

org.springframework.boot:spring-boot-starter-websocket (1.3.8.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.8.release)

org.springframework:spring-websocket MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.3.8.release Source cve...

com.blitline:blitline-image-client-example (>=0.14.0, <=0.14.2), com.blitline:blitline-image-client-spring (>=0.14.0, <=0.14.2) +36 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.1.1.release)

org.springframework:spring-webmvc MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.blitline:blitline-image-client-example =0.14.0, =0.14.0, =1.3, =1.31, =1.2, =1.4,...

net.sourceforge.openutils:openutils-spring (0.2) potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.0-m5)

org.springframework:spring-webmvc MAVEN version 2.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.openutils:openutils-spring 0.2 Source cves: CVE-2026-41843 Source advisory:...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-app-rt (>=1.20-rc1, <=1.31) +15 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.0.2.release)

org.springframework:spring-webmvc MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20-rc1, =1.6, =1.6, =1.6, =1.1.1,...

com.att.nsa:msgrtr (0.0.5), com.comcast.magic-wand:appium (>=4.0.1, <=4.0.3) +27 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.2.14.release)

org.springframework:spring-webmvc MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.att.nsa:msgrtr 0.0.5 - com.comcast.magic-wand:appium =4.0.1, =1.1.0, =1.1.0,...

io.springfox:springfox-core (>=2.0.1, <=2.1.2), io.springfox:springfox-petstore (>=2.0.1, <=2.1.2) +9 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.17.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.17.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - io.springfox:springfox-core =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1...