ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), capital.scalable:spring-auto-restdocs-core (>=1.0.14, <=1.0.15) +128 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.3.15.release)

org.springframework:spring-webmvc MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ai.foremast.metrics:foremast-spring-4x-k8s-metrics =0.1.6, =1.0.14, =1.0.20, =1.0.6,...

ch.rasc:sse-eventbus (1.1.9), com.atlassian.oai:swagger-request-validator-examples (>=2.9.1, <=2.13.0) +34 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.3.26.release)

org.springframework:spring-webmvc MAVEN version 4.3.26.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.rasc:sse-eventbus 1.1.9 - com.atlassian.oai:swagger-request-validator-examples...

net.sf.json-lib:json-lib-ext-spring (1.0), org.apache.activemq:activemq-web (5.1.0) +9 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (2.5.1)

org.springframework:spring-webmvc MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sf.json-lib:json-lib-ext-spring 1.0 - org.apache.activemq:activemq-web 5.1.0 -...

com.ctosb:ctosb-core (>=1.0.0, <=1.0.2), com.github.wangdasong:nsw-base-core (1.0.4) +15 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.2.17.release)

org.springframework:spring-webmvc MAVEN version 3.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.ctosb:ctosb-core =1.0.0, =1.5.1, =3.0.12, =1.4.0-rc2, =1.4.0-rc2, =1.4.0-rc2,...

com.exadel.flamingo.maven.plugin:flamingoapp (>=1.0.0, <=1.5.0), org.acegisecurity:acegi-security (>=1.0.1, <=1.0.2) +19 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (1.2.7)

org.springframework:spring-webmvc MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.exadel.flamingo.maven.plugin:flamingoapp =1.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1,...

cn.bestwu:fastjson (>=1.1-unwrap, <=1.2-unwrap), co.paralleluniverse:comsat-spring-boot (0.6.0) +300 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.2.3.release)

org.springframework:spring-webmvc MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.bestwu:fastjson =1.1-unwrap, =3.5, =1.2.6, =3.0.0-0, =2.5, =2.5, =2.5, =2.6 -...

com.consol.citrus:citrus-http (2.2), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +78 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.0.7.release)

org.springframework:spring-webmvc MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.consol.citrus:citrus-http 2.2 - de.codecentric:jbehave-admin-server =0.0.1, =1.0....

am.ik.woothee:woothee-spring (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.9) +94 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.1.3.release)

org.springframework:spring-webmvc MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.woothee:woothee-spring 1.0.0 - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 0.9 ...

cn.chenzw.swagger:swagger-ext-all (1.0.1), cn.chenzw.swagger:swagger-ext-core (1.0.1) +216 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.3.24.release)

org.springframework:spring-webmvc MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.chenzw.swagger:swagger-ext-all 1.0.1 - cn.chenzw.swagger:swagger-ext-core 1.0.1 -...

com.gwtincubator:gwt-incubator-security (1.0.1), com.redhat.rhevm.api:rhevm-api-mock-webapp (>=0.1-milestone, <=0.9-milestone8.2) +200 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (2.5.6)

org.springframework:spring-webmvc MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.gwtincubator:gwt-incubator-security 1.0.1 - com.redhat.rhevm.api:rhevm-api-mock-webapp...

au.com.mountain-pass:hyperstate (>=1, <=3), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4) +277 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.2.4.release)

org.springframework:spring-webmvc MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =11.0.0, =1.1.5-7, =0.1.0, =1.0.0.releas...

org.apache.portals.bridges:springmvc (1.0.4), org.apache.portals.jetspeed-2:j2-admin (>=2.1.3, <=2.1.4) +13 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (2.0.5)

org.springframework:spring-webmvc MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.portals.bridges:springmvc 1.0.4 - org.apache.portals.jetspeed-2:j2-admin =2.1.3,...

org.springframework:spring-webmvc-portlet (2.5.3), org.springframework:spring-webmvc-struts (2.5.3) potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (2.5.3)

org.springframework:spring-webmvc MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-webmvc-portlet 2.5.3 - org.springframework:spring-webmvc-struts...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-captcha (>=1.5.13, <=1.5.13.2) +487 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.3.17.release)

org.springframework:spring-webmvc MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-captcha =1.5.13, =1.5.13, =1.5.13,...

net.sourceforge.openutils:openutils-bshd5 (0.1), net.sourceforge.openutils:openutils-spring (0.1) +11 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (1.2.6)

org.springframework:spring-webmvc MAVEN version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.openutils:openutils-bshd5 0.1 - net.sourceforge.openutils:openutils-spring 0....

cn.jairdavis:jair-common-utils (1.0.4), com.allenru:cross-origin (1.0.1) +43 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.0.2.release)

org.springframework:spring-webmvc MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.jairdavis:jair-common-utils 1.0.4 - com.allenru:cross-origin 1.0.1 -...

be.dnsbelgium:rdap-server (>=0.3.3, <=1.0.3), ch.ralscha:extdirectspring (1.3.9) +54 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.2.5.release)

org.springframework:spring-webmvc MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - be.dnsbelgium:rdap-server =0.3.3, =0.4.1, =0.4.1, =0.4.1, =1.0.0, =0.3.0, =2.0.0,...

com.foreach.across:across-web (3.1.2.release), com.foreach.imageserver:imageserver-admin (5.0.0.release) +156 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.3.21.release)

org.springframework:spring-webmvc MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.foreach.across:across-web 3.1.2.release -...

com.github.kaylves:kaylves-easydao (0.0.1-release), com.github.ptomli.bedrock:bedrock-core (1.0.0) +58 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.1.4.release)

org.springframework:spring-webmvc MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.kaylves:kaylves-easydao 0.0.1-release -...

org.springmodules:spring-modules-jakarta-commons (0.7), org.springmodules:spring-modules-osworkflow (0.7) potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (2.0.1)

org.springframework:spring-webmvc MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons 0.7 -...