be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6), ch.ralscha:extdirectspring (1.7.1) +407 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.4.release)

org.springframework:spring-webmvc MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - be.looorent:jflu-producer-springmvc =0.1, =1.1, =1.0.10, =1.0, =1.0.7.oss, =1.0.7.oss...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +47 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.0.8.release)

org.springframework:spring-webmvc MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 - co.paralleluniverse:comsat-spring-webm...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), capital.scalable:spring-auto-restdocs-core (>=1.0.14, <=1.0.15) +128 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.15.release)

org.springframework:spring-webmvc MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ai.foremast.metrics:foremast-spring-4x-k8s-metrics =0.1.6, =1.0.14, =1.0.20, =1.0.6,...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.6), ch.ralscha:extdirectspring (>=1.4.2, <=1.4.3) +111 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.0.6.release)

org.springframework:spring-webmvc MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 0.6 - ch.ralscha:extdirectspring =1.4.2,...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), ch.rasc:sse-eventbus (1.1.6) +627 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.14.release)

org.springframework:spring-webmvc MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =2.0.5, =2.0....

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +6490 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.21)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41842 Source advisory: OSV:GHSA-X23C-287F-QQV5...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (3.0.0) +636 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.10.release)

org.springframework:spring-webmvc MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 3.0.0 -...

com.github.skeychen:dswork-config (>=9.0.1, <=9.1.1), com.github.skeychen:dswork-javaweb (>=9.0.1, <=9.1.1) +45 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.28.release)

org.springframework:spring-webmvc MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.skeychen:dswork-config =9.0.1, =9.0.1, =9.0.1, =2.2.0, =2.2.0, =2.2.0,...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +324 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.2.5.release)

org.springframework:spring-webmvc MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...

com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-webx-all (>=3.1.6, <=3.2.4) +34 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (3.2.7.release)

org.springframework:spring-webmvc MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.alibaba.citrus:citrus-test-all =3.1.6, =3.1.6, =0.10.0, =1.0.1, =0.8.3, =1.0,...

com.github.hqstevenson.splunk:splunk.jms.activemq (>=1.1.0, <=2.1.1), de.the-library-code.dspace:addon-duplication-detection-service-jspui (>=6.2.0, <=6.3.1) +18 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (3.2.16.release)

org.springframework:spring-webmvc MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.hqstevenson.splunk:splunk.jms.activemq =1.1.0, =6.2.0, =5.11.4, =5.11.4,...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-captcha (>=1.5.13, <=1.5.13.2) +487 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.3.17.release)

org.springframework:spring-webmvc MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-captcha =1.5.13, =1.5.13, =1.5.13,...

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +9 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (2.0-m2)

org.springframework:spring-webmvc MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 -...

com.blitline:blitline-image-client-example (>=0.14.0, <=0.14.2), com.blitline:blitline-image-client-spring (>=0.14.0, <=0.14.2) +36 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.1.1.release)

org.springframework:spring-webmvc MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.blitline:blitline-image-client-example =0.14.0, =0.14.0, =1.3, =1.31, =1.2, =1.4,...

com.github.yamingd.argo:argo-web (>=2.5.0, <=3.0.1), io.snappydata:gemfire-web (>=1.5.0-beta, <=2.0-beta) +29 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (3.2.12.release)

org.springframework:spring-webmvc MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.yamingd.argo:argo-web =2.5.0, =1.5.0-beta, =3.1.9-ga, =3.1.9-ga, =3.1.9-g...

cn.deepbit:deepbit-sdk (8.3.7), cn.deepbit:deepbit-start-mvc (8.3.7) +170 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.3.23.release)

org.springframework:spring-webmvc MAVEN version 4.3.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.deepbit:deepbit-sdk 8.3.7 - cn.deepbit:deepbit-start-mvc 8.3.7 -...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.4-rc.0, <=3.5.18) +77 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.2.0.release)

org.springframework:spring-webmvc MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.4.0, =3.5.4-rc.0, =0.0.1, =0.1, =0.0.1,...

com.github.skeychen:dswork-config (>=9.0.1, <=9.1.1), com.github.skeychen:dswork-javaweb (>=9.0.1, <=9.1.1) +45 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.3.28.release)

org.springframework:spring-webmvc MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.skeychen:dswork-config =9.0.1, =9.0.1, =9.0.1, =2.2.0, =2.2.0, =2.2.0,...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.1), com.bnd-lib:bnd-chemistry (0.7.0) +59 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (3.2.0.release)

org.springframework:spring-webmvc MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1 - com.bnd-lib:bnd-chemistry 0.7.0 -...

com.github.kaylves:kaylves-easydao (0.0.1-release), com.github.ptomli.bedrock:bedrock-core (1.0.0) +58 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (3.1.4.release)

org.springframework:spring-webmvc MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.kaylves:kaylves-easydao 0.0.1-release -...