au.com.mountain-pass:hyperstate (>=1, <=3), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4) +277 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.2.4.release)

org.springframework:spring-webmvc MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =11.0.0, =1.1.5-7, =0.1.0, =1.0.0.releas...

cn.home1:oss-admin (>=1.0.6.oss, <=1.0.7.oss), cn.home1:oss-configserver (>=1.0.6.oss, <=1.0.7.oss) +917 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.3.release)

org.springframework:spring-webmvc MAVEN version 4.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.home1:oss-admin =1.0.6.oss, =1.0.6.oss, =1.0.6.oss, =1.0.7.oss, =1.0.7.oss,...

at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21) +1095 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=6.2.0, <=6.2.18)

org.springframework:spring-websocket MAVEN version =6.2.0, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41838 Source advisory: GHSA-Q723-847Q-5G8G...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), br.com.m4rc310:br-com-m4rc310-graphql (1.0.1) +1872 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=5.0.0.release, <=5.3.39)

org.springframework:spring-websocket MAVEN version =5.0.0.release, =4.4.0.0, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.6.0, =3.1.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.10.5 and more Source cves: CVE-2026-41838 Source advisory: GHSA-Q723-847Q-5G8G...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7256 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41843 Source advisory: GHSA-72PG-X5F8-J25J...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7256 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41843 Source advisory: OSV:GHSA-72PG-X5F8-J25J...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.1.1, <=0.112.0) +1743 more potentially affected by CVE-2026-41843 via org.springframework:spring-webflux (>=6.1.0, <=6.1.21)

org.springframework:spring-webflux MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.6.0, =0.6.0, =0.5.0, =1.2.0, =1.1.0, =1.3.0 and more Source cves: CVE-2026-41843 Source advisory: GHSA-72PG-X5F8-J25J...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.1.1, <=0.112.0) +1743 more potentially affected by CVE-2026-41841 via org.springframework:spring-webflux (>=6.1.0, <=6.1.21)

org.springframework:spring-webflux MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.6.0, =0.6.0, =0.5.0, =1.2.0, =1.1.0, =1.3.0 and more Source cves: CVE-2026-41841 Source advisory: GHSA-MQ64-J8F9-9GCJ...

com.almis.awe:awe-annotation (>=4.11.6, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.6, <=4.12.0) +74 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.3.0, <=3.3.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.3.0, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =1.50.7, =1.51.1 and more Source cves: CVE-2026-41720 Source advisory: OSV:GHSA-JRV5-8W28-4265...

com.almis.awe:awe-annotation (>=4.11.6, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.6, <=4.12.0) +74 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.3.0, <=3.3.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.3.0, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =1.50.7, =1.51.1 and more Source cves: CVE-2026-41720 Source advisory: GHSA-JRV5-8W28-4265...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +19597 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-41843 Source advisory: GHSA-72PG-X5F8-J25J...

com.brienwheeler.web.tags:tags-blwform (>=1.0-release, <=1.11), com.brienwheeler.web.tags:tags-blwjawr (>=1.0-release, <=1.11) +138 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (3.2.9.release)

org.springframework:spring-webmvc MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.brienwheeler.web.tags:tags-blwform =1.0-release, =1.0-release, =1.0-release,...

com.sitewhere:sitewhere-activemq (1.4.0), com.sitewhere:sitewhere-azure (1.4.0) +21 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.2.10.release)

org.springframework:spring-webmvc MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.sitewhere:sitewhere-activemq 1.4.0 - com.sitewhere:sitewhere-azure 1.4.0 -...

com.github.yamingd.argo:argo-web (>=2.5.0, <=3.0.1), io.snappydata:gemfire-web (>=1.5.0-beta, <=2.0-beta) +29 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.2.12.release)

org.springframework:spring-webmvc MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.yamingd.argo:argo-web =2.5.0, =1.5.0-beta, =3.1.9-ga, =3.1.9-ga, =3.1.9-g...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-captcha (>=1.5.13, <=1.5.13.2) +487 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.17.release)

org.springframework:spring-webmvc MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-captcha =1.5.13, =1.5.13, =1.5.13,...

com.foreach.across.modules:bootstrap-ui-module (2.1.1.release), com.foreach.across.modules:dynamic-forms-module (0.0.2.release) +181 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.20.release)

org.springframework:spring-webmvc MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.foreach.across.modules:bootstrap-ui-module 2.1.1.release -...

com.foreach.across:across-web (3.1.2.release), com.foreach.imageserver:imageserver-admin (5.0.0.release) +156 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.21.release)

org.springframework:spring-webmvc MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.foreach.across:across-web 3.1.2.release -...

cn.chenzw.swagger:swagger-ext-all (1.0.1), cn.chenzw.swagger:swagger-ext-core (1.0.1) +216 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.24.release)

org.springframework:spring-webmvc MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.chenzw.swagger:swagger-ext-all 1.0.1 - cn.chenzw.swagger:swagger-ext-core 1.0.1 -...

com.github.kaylves:kaylves-easydao (0.0.1-release), com.github.ptomli.bedrock:bedrock-core (1.0.0) +58 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.1.4.release)

org.springframework:spring-webmvc MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.kaylves:kaylves-easydao 0.0.1-release -...

com.github.bluejoe2008:elfinder-servlet-2 (>=1.0, <=1.2), com.github.jknack:mwa-solr3 (0.4.0) +114 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (3.2.3.release)

org.springframework:spring-webmvc MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.bluejoe2008:elfinder-servlet-2 =1.0, =1.0.2, =2.9.4-sp.15, =2.9.4-sp.15,...