be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9), be.appify.prefab:prefab-core (0.2.0) +482 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-relational MAVEN version =4.0.0, =0.2.0, =0.5.0, =0.2.0, =0.2.0, =4.0.6.117.0, =4.0.6.117.0, =4.0.6.117.1, =0.4.7, =1.1.0 and more Source cves: CVE-2026-41697 Source advisory: OSV:GHSA-8R2H-XH92-GQ57...

com.consol.citrus:citrus-http (2.2), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +78 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.0.7.release)

org.springframework:spring-webmvc MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.consol.citrus:citrus-http 2.2 - de.codecentric:jbehave-admin-server =0.0.1, =1.0....

com.github.zed-platform:zed-camel-rpi-benchmark (0.0.18), com.github.zed-platform:zed-service-messagestore-attachment (>=0.0.16, <=0.0.19) +5 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.1.4.release)

org.springframework:spring-jms MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.github.zed-platform:zed-camel-rpi-benchmark 0.0.18 -...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7265 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +19176 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (>=6.2.0, <=6.2.18)

org.springframework:spring-expression MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =0.9.0 and more Source cves: CVE-2026-41850 Source advisory: GHSA-R5W3-XV2F-J59Q...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +3591 more potentially affected by CVE-2026-41710 via org.springframework.retry:spring-retry (>=2.0.0, <=2.0.12)

org.springframework.retry:spring-retry MAVEN version =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =cloud-0.1, =0.6 and more Source cves: CVE-2026-41710 Source advisory: OSV:GHSA-2827-2MXX-J8PV...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +2350 more potentially affected by CVE-2026-41839 via org.springframework:spring-webflux (>=6.2.0, <=6.2.18)

org.springframework:spring-webflux MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-41839 Source advisory: OSV:GHSA-4HFH-6X8G-GWPP...

CVE-2026-11521

Mohammed-eid35 bank-management-system-springboot (Transaction Endpoint) has a vulnerability in TransactionController.java leading to improper authorization. A remote attacker could exploit it, and public PoCs exist per the CVE metrics. Affected version details are not provided due to rolling rele...

CVE-2026-11521 Mohammed-eid35 bank-management-system-springboot Transaction Endpoint TransactionController.java improper authorization

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...

CVE-2026-11521

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +10946 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (>=6.1.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41844 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254121...

CVE-2026-11521: Improper Authorization

A security vulnerability has been detected in Mohammed-eid35 bank-management-system-springboot up to 7b9bcc65ad7df3db29af71aed9bb500e5f24d948. This affects an unknown part of the file src/main/java/com/alien/bank/management/system/controller/TransactionController.java of the component Transaction...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +2277 more potentially affected by CVE-2026-22745 via org.springframework:spring-webflux (>=6.2.0, <=6.2.17)

org.springframework:spring-webflux MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-22745 Source advisory: OSV:GHSA-6P4F-WCWH-5VVM...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7027 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.17)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-22741 Source advisory: MEND:CVE-2026-22741...

io.crossplane.compositefunctions:crossplane-function-example (>=1.20-alpha, <=2.1.0), io.crossplane.compositefunctions:crossplane-function-springboot-starter (>=1.20-alpha, <=2.1.0) +19 more potentially affected by CVE-2026-40968 via org.springframework.grpc:spring-grpc-core (>=1.0.0-rc1, <=1.0.2)

org.springframework.grpc:spring-grpc-core MAVEN version =1.0.0-rc1, =1.20-alpha, =1.20-alpha, =2026.01, =0.8.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =1.0.0, =1.0.0-rc1, =1.0.2 - org.springfr...

org.apache.camel.quarkus:camel-quarkus-consul (>=3.29.0, <=3.33.0), org.apache.camel.quarkus:camel-quarkus-consul-deployment (>=3.29.0, <=3.33.0) +3 more potentially affected by CVE-2026-27172 via org.apache.camel:camel-consul (>=4.15.0, <=4.18.0)

org.apache.camel:camel-consul MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.18.0 Source cves: CVE-2026-27172 Source advisory: GHSA-5RC6-9QFP-8VWG...

org.apache.camel.quarkus:camel-quarkus-consul (>=3.29.0, <=3.33.0), org.apache.camel.quarkus:camel-quarkus-consul-deployment (>=3.29.0, <=3.33.0) +3 more potentially affected by CVE-2026-27172 via org.apache.camel:camel-consul (>=4.15.0, <=4.18.0)

org.apache.camel:camel-consul MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =4.18.0 Source cves: CVE-2026-27172 Source advisory: MEND:CVE-2026-27172...

org.apache.camel.kafkaconnector:camel-sjms2-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-sjms2 (4.18.0) +6 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-sjms2 (>=4.15.0, <=4.18.1)

org.apache.camel:camel-sjms2 MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.1 Source cves: CVE-2026-40860 Source advisory: OSV:GHSA-M5VH-3FW5-5WGH...

org.apache.camel.kafkaconnector:camel-amqp-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.kafkaconnector:camel-jms-amqp-10-sink-kafka-connector (>=3.20.3, <=4.14.5) +6 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-amqp (>=3.0.0, <=4.14.6)

org.apache.camel:camel-amqp MAVEN version =3.0.0, =0.1.0, =3.20.3, =3.20.3, =4.7.0, =1.0.0-m6, =1.0.0-m6, =1.0.0-m6, =3.0.0, =4.14.6 Source cves: CVE-2026-40860 Source advisory: OSV:GHSA-M5VH-3FW5-5WGH...

org.apache.camel.kafkaconnector:camel-jms-amqp-10-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-jms-amqp-10-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-amqp (>=4.15.0, <=4.18.1)

org.apache.camel:camel-amqp MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.1 Source cves: CVE-2026-40860 Source advisory: OSV:GHSA-M5VH-3FW5-5WGH...