ch.rasc:wampspring (>=1.0.1, <=1.1.0), ch.rasc:wampspring-session (1.1.0) +13 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.1.4.release)

org.springframework:spring-websocket MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ch.rasc:wampspring =1.0.1, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =0.10, =0.10, =6.0.0...

com.almis.awe:awe-boot (>=4.0.4, <=4.0.5), com.almis.awe:awe-controller (>=4.0.3, <=4.1.1) +20 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.14.release)

org.springframework:spring-websocket MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.almis.awe:awe-boot =4.0.4, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3,...

org.ops4j.pax.web.samples:war-vaadin08-spring (>=9.0.11, <=10.1.2), org.springframework.integration:spring-integration-websocket (4.3.24.release) +1 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.30.release)

org.springframework:spring-websocket MAVEN version 4.3.30.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.ops4j.pax.web.samples:war-vaadin08-spring =9.0.11, =1.2.7, =1.3.11 Source...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.1.1, <=0.112.0) +1744 more potentially affected by CVE-2026-41843 via org.springframework:spring-webflux (>=6.1.0, <=6.1.21)

org.springframework:spring-webflux MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.6.0, =0.6.0, =0.5.0, =1.2.0, =1.1.0, =1.3.0 and more Source cves: CVE-2026-41843 Source advisory: OSV:GHSA-72PG-X5F8-J25J...

cn.bestwu:fastjson (>=1.1-unwrap, <=1.2-unwrap), co.paralleluniverse:comsat-spring-boot (0.6.0) +300 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.2.3.release)

org.springframework:spring-webmvc MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.bestwu:fastjson =1.1-unwrap, =3.5, =1.2.6, =3.0.0-0, =2.5, =2.5, =2.5, =2.6 -...

net.apexes.wsonrpc:wsonrpc (0.5.0), org.springframework.integration:spring-integration-websocket (4.1.0.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.1.2.release)

org.springframework:spring-websocket MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - net.apexes.wsonrpc:wsonrpc 0.5.0 -...

be.dnsbelgium:rdap-server (1.1.0), co.paralleluniverse:comsat-spring-boot (0.5.0) +239 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.1.7.release)

org.springframework:spring-webmvc MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - be.dnsbelgium:rdap-server 1.1.0 - co.paralleluniverse:comsat-spring-boot 0.5.0 -...

org.apache.activemq:activemq-web (5.0.0), org.apache.activemq:activemq-web-console (5.0.0) +9 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (2.0.6)

org.springframework:spring-webmvc MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.activemq:activemq-web 5.0.0 - org.apache.activemq:activemq-web-console 5.0.0 -...

net.solarnetwork.common:net.solarnetwork.common.web (>=2.2.0, <=2.4.0), org.springframework.boot:spring-boot-starter-websocket (1.5.20.release) +1 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.23.release)

org.springframework:spring-websocket MAVEN version 4.3.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - net.solarnetwork.common:net.solarnetwork.common.web =2.2.0, =2.4.0 -...

ba.jamax.util:jamax-rest (>=1.3.1-release, <=1.3.4-release), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +392 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.1.6.release)

org.springframework:spring-webmvc MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ba.jamax.util:jamax-rest =1.3.1-release, =0.0.6, =0.1.0, =0.1.5, =1.0.13.release,...

com.foreach.across:across-web (3.1.2.release), com.foreach.imageserver:imageserver-admin (5.0.0.release) +156 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.21.release)

org.springframework:spring-webmvc MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.foreach.across:across-web 3.1.2.release -...

au.com.dius.pact.provider:spring (>=4.1.0, <=4.1.6), au.com.dius:pact-jvm-provider-spring (>=4.0.0-beta.1, <=4.0.10) +261 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.3.19.release)

org.springframework:spring-webmvc MAVEN version 4.3.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.dius.pact.provider:spring =4.1.0, =4.0.0-beta.1, =3.6.0-rc.1, =2.5.0, =2.5.0,...

ba.jamax.util:jamax-rest (>=1.3.1-release, <=1.3.4-release), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +392 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.1.6.release)

org.springframework:spring-webmvc MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ba.jamax.util:jamax-rest =1.3.1-release, =0.0.6, =0.1.0, =0.1.5, =1.0.13.release,...

org.lightadmin:light-logging-configurer (1.0.0.rc1) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.1.0.release)

org.springframework:spring-websocket MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.lightadmin:light-logging-configurer 1.0.0.rc1 Source cves: CVE-2026-41838...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-security (1.1.4.release) +178 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.1.8.release)

org.springframework:spring-webmvc MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

com.github.seykron:htmlunit-runner-freemarker (1.0), org.springframework:spring-mock (2.0) +1 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (2.0)

org.springframework:spring-webmvc MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.seykron:htmlunit-runner-freemarker 1.0 - org.springframework:spring-mock 2.0 -...

org.acegisecurity:acegi-security-samples-contacts (1.0.7), org.andromda.andromdapp.projects:andromda-andromdapp-project-richclient-ant (3.3) +1 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (1.2.9)

org.springframework:spring-webmvc MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security-samples-contacts 1.0.7 -...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7260 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41844 Source advisory: GHSA-H3QP-GQRC-Q736...

com.sun.jersey:jersey-spring (0.8-ea), org.springframework.ws:spring-ws-core (1.5.0) +4 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.5.2)

org.springframework:spring-webmvc MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.sun.jersey:jersey-spring 0.8-ea - org.springframework.ws:spring-ws-core 1.5.0 -...

com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring-boot-starter (>=2.3.12, <=2.3.20) +40 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.3.29.release)

org.springframework:spring-webmvc MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.fangjinuo.audit:audit-spring =2.3.12, =2.3.12, =4.0.1, =3.0.0, =3.0.0,...