au.com.mountain-pass:hyperstate (>=1, <=3), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4) +277 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.2.4.release)

org.springframework:spring-webmvc MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =11.0.0, =1.1.5-7, =0.1.0, =1.0.0.releas...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +47 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.0.8.release)

org.springframework:spring-webmvc MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 - co.paralleluniverse:comsat-spring-webm...

ch.sbb.releasetrain:jsfbootadapter (0.0.25), ch.sbb.releasetrain:webui (0.0.25) +343 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.2.7.release)

org.springframework:spring-webmvc MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.sbb.releasetrain:jsfbootadapter 0.0.25 - ch.sbb.releasetrain:webui 0.0.25 -...

ch.ralscha:extdirectspring (1.7.3), cn.afterturn:easypoi-spring-boot-starter (>=0.1, <=0.1.1) +877 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.3.12.release)

org.springframework:spring-webmvc MAVEN version 4.3.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring 1.7.3 - cn.afterturn:easypoi-spring-boot-starter =0.1,...

cn.deepbit:deepbit-sdk (8.3.7), cn.deepbit:deepbit-start-mvc (8.3.7) +170 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.3.23.release)

org.springframework:spring-webmvc MAVEN version 4.3.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.deepbit:deepbit-sdk 8.3.7 - cn.deepbit:deepbit-start-mvc 8.3.7 -...

at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-security (1.1.0.release) +134 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.0.3.release)

org.springframework:spring-webmvc MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release -...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +6490 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.21)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), ch.rasc:sse-eventbus (1.1.6) +627 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.3.14.release)

org.springframework:spring-webmvc MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =2.0.5, =2.0....

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +19563 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (3.0.0) +636 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.3.10.release)

org.springframework:spring-webmvc MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 3.0.0 -...

com.ctosb:ctosb-core (>=1.0.0, <=1.0.2), com.github.wangdasong:nsw-base-core (1.0.4) +15 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (3.2.17.release)

org.springframework:spring-webmvc MAVEN version 3.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.ctosb:ctosb-core =1.0.0, =1.5.1, =3.0.12, =1.4.0-rc2, =1.4.0-rc2, =1.4.0-rc2,...

com.sitewhere:sitewhere-activemq (1.4.0), com.sitewhere:sitewhere-azure (1.4.0) +21 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.2.10.release)

org.springframework:spring-webmvc MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.sitewhere:sitewhere-activemq 1.4.0 - com.sitewhere:sitewhere-azure 1.4.0 -...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +6490 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.21)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41853 Source advisory: GHSA-CJPG-RGQ5-FR37...

cn.bestwu:fastjson (>=1.1-unwrap, <=1.2-unwrap), co.paralleluniverse:comsat-spring-boot (0.6.0) +300 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.2.3.release)

org.springframework:spring-webmvc MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.bestwu:fastjson =1.1-unwrap, =3.5, =1.2.6, =3.0.0-0, =2.5, =2.5, =2.5, =2.6 -...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2809 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-security (1.1.4.release) +178 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.8.release)

org.springframework:spring-webmvc MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

ch.rasc:sse-eventbus (1.1.9), com.atlassian.oai:swagger-request-validator-examples (>=2.9.1, <=2.13.0) +34 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.3.26.release)

org.springframework:spring-webmvc MAVEN version 4.3.26.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.rasc:sse-eventbus 1.1.9 - com.atlassian.oai:swagger-request-validator-examples...

com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3), com.blitline:blitline-image-client-spring (>=0.10.1, <=0.13.3) +32 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.0.4.release)

org.springframework:spring-webmvc MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.blitline:blitline-image-client-example =0.10.1, =0.10.1, =v2.5.0-beta4, =2.4.0.rc...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2809 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41853 Source advisory: GHSA-CJPG-RGQ5-FR37...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.6), ch.ralscha:extdirectspring (>=1.4.2, <=1.4.3) +111 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (4.0.6.release)

org.springframework:spring-webmvc MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 0.6 - ch.ralscha:extdirectspring =1.4.2,...