io.camunda.connector:connector-soap (>=8.9.0-alpha3, <=8.10.0-alpha2), org.apereo.cas:cas-server-support-inwebo-mfa (>=8.0.0-rc1, <=8.0.0-rc5) potentially affected by CVE-2026-40995 via org.springframework.ws:spring-ws-security (>=5.0.0, <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =8.0.0-rc1, =8.0.0-rc5 Source cves: CVE-2026-40995 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320712...

org.jumpmind.symmetric:symmetric (>=2.0.0, <=2.0.15), org.springframework.ws:spring-ws-support (2.0.0-m1) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.0.1.release)

org.springframework:spring-jms MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.jumpmind.symmetric:symmetric =2.0.0, =2.0.15 - org.springframework.ws:spring-ws-support...

com.github.zed-platform:zed-camel-rpi-benchmark (0.0.18), com.github.zed-platform:zed-service-messagestore-attachment (>=0.0.16, <=0.0.19) +5 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.1.4.release)

org.springframework:spring-jms MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.github.zed-platform:zed-camel-rpi-benchmark 0.0.18 -...

org.apache.camel:camel-itest-spring40 (>=2.15.2, <=2.17.7), org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support (>=2.2.1.release_1, <=2.3.0.release_1) +5 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.0.9.release)

org.springframework:spring-jms MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring40 =2.15.2, =2.2.1.release1, =1.0.0, =1.1.11.release,...

org.broadleafcommerce:broadleaf-admin-module (>=3.0.0-ga, <=3.0.2-ga), org.broadleafcommerce:broadleaf-common (>=3.0.0-ga, <=3.1.2-ga) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.2.release)

org.springframework:spring-jms MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.broadleafcommerce:broadleaf-admin-module =3.0.0-ga, =3.0.0-ga, =3.0.0-ga, =3.0.0-ga,...

com.mysema.web:webmin (0.2.3), org.parancoe:parancoe (0.3.3) +11 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.0.7)

org.springframework:spring-webmvc MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.mysema.web:webmin 0.2.3 - org.parancoe:parancoe 0.3.3 - org.parancoe:parancoe-core 0.3.3 ...

org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support (>=2.4.2.release_1, <=2.4.2.release_2), org.springframework.integration:spring-integration-jms (4.2.13.release) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.9.release)

org.springframework:spring-jms MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support...

org.apache.portals.bridges:springmvc (1.0.4), org.apache.portals.jetspeed-2:j2-admin (>=2.1.3, <=2.1.4) +13 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.0.5)

org.springframework:spring-webmvc MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.portals.bridges:springmvc 1.0.4 - org.apache.portals.jetspeed-2:j2-admin =2.1.3,...

ca.jeb:common-java (2014.10.01), ca.jeb:protobuf-serializer (2014.10.01) +3 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.0.7.release)

org.springframework:spring-jms MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - ca.jeb:common-java 2014.10.01 - ca.jeb:protobuf-serializer 2014.10.01 -...

com.mysema.web:webmin (0.2.3), org.parancoe:parancoe (0.3.3) +11 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.0.7)

org.springframework:spring-webmvc MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.mysema.web:webmin 0.2.3 - org.parancoe:parancoe 0.3.3 - org.parancoe:parancoe-core 0.3.3 ...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +11 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (1.2.8)

org.springframework:spring-webmvc MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =0.5, =0.8, =0.8a Source cves: CVE-2026-41846...

org.apache.portals.bridges:springmvc (1.0.4), org.apache.portals.jetspeed-2:j2-admin (>=2.1.3, <=2.1.4) +13 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.0.5)

org.springframework:spring-webmvc MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.portals.bridges:springmvc 1.0.4 - org.apache.portals.jetspeed-2:j2-admin =2.1.3,...

org.springframework.ws:spring-ws-support (>=1.5.1, <=1.5.3) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.4)

org.springframework:spring-jms MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.ws:spring-ws-support =1.5.1, =1.5.3 Source cves: CVE-2026-41855 Source advisory...

org.springframework.boot:spring-boot-starter-hornetq (1.2.0.release), org.springframework.boot:spring-boot-starter-ws (1.2.0.release) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.1.3.release)

org.springframework:spring-jms MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.boot:spring-boot-starter-hornetq 1.2.0.release -...

org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support (>=2.2.0.release_1, <=2.2.0.release_2), org.chtijbug.drools:drools-platform-brms (>=0.5.0, <=0.5.5) +4 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.0.5.release)

org.springframework:spring-jms MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support...

com.sun.jersey:jersey-spring (0.8-ea), org.springframework.ws:spring-ws-core (1.5.0) +4 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.5.2)

org.springframework:spring-webmvc MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.sun.jersey:jersey-spring 0.8-ea - org.springframework.ws:spring-ws-core 1.5.0 -...

org.springframework.ws:spring-ws-core (1.0-m3) potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.0.2)

org.springframework:spring-webmvc MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework.ws:spring-ws-core 1.0-m3 Source cves: CVE-2026-41853 Source advisory:...

org.springframework.ws:spring-ws-support (1.5.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.2)

org.springframework:spring-jms MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.ws:spring-ws-support 1.5.0 Source cves: CVE-2026-41855 Source advisory:...

net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +11 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (1.2.8)

org.springframework:spring-webmvc MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =0.5, =0.8, =0.8a Source cves: CVE-2026-41853...

org.springframework.ws:spring-ws-core (1.0-m3) potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.0.2)

org.springframework:spring-webmvc MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework.ws:spring-ws-core 1.0-m3 Source cves: CVE-2026-41846 Source advisory:...