org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +6 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (1.2.5)

org.springframework:spring-webmvc MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...

org.geoserver:community (1.4.0_gt2.2.x), org.geoserver:platform (>=1.4.0-m1, <=1.4.0_gt2.2.x) +6 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (1.2.5)

org.springframework:spring-webmvc MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.geoserver:community 1.4.0gt2.2.x - org.geoserver:platform =1.4.0-m1, =1.4.0gt2.2.x -...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-orm (1.2.2) +1 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (1.2.2)

org.springframework:spring-webmvc MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-orm 1.2.2 -...

org.springmodules:spring-modules-jakarta-commons (>=0.8, <=0.8a), org.springmodules:spring-modules-osworkflow (>=0.8, <=0.8a) potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (2.0.3)

org.springframework:spring-webmvc MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springmodules:spring-modules-jakarta-commons =0.8, =0.8, =0.8a Source cves: CVE-2026-4184...

com.cedarsoft.commons:rmi (>=1.6.1, <=1.6.3), org.appfuse:appfuse-spring (2.0.1) +7 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (2.5)

org.springframework:spring-webmvc MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cedarsoft.commons:rmi =1.6.1, =2.0.3, =2.0.3, =2.0.4 -...

org.apache.portals.bridges:springmvc (1.0.4), org.apache.portals.jetspeed-2:j2-admin (>=2.1.3, <=2.1.4) +13 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (2.0.5)

org.springframework:spring-webmvc MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.portals.bridges:springmvc 1.0.4 - org.apache.portals.jetspeed-2:j2-admin =2.1.3,...

ch.ralscha:extdirectspring (1.7.3), cn.afterturn:easypoi-spring-boot-starter (>=0.1, <=0.1.1) +877 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.12.release)

org.springframework:spring-webmvc MAVEN version 4.3.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring 1.7.3 - cn.afterturn:easypoi-spring-boot-starter =0.1,...

ch.ralscha:extdirectspring (>=1.0.2, <=1.0.3), com.github.rgladwell:spring-mvc-util (>=1.0.3, <=1.0.6) +30 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (3.0.4.release)

org.springframework:spring-webmvc MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.0.2, =1.0.3, =0.7.1, =1.3, =1.3, =1.3, =1.3.1 -...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=4.0.0), cn.afterturn:easypoi-web (>=3.0.1, <=4.0.0) +162 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.1.1.release)

org.springframework:spring-webmvc MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =3.0.1, =3.1.0, =3.1.0, =1.0.4,...

ch.ralscha:extdirectspring (>=1.0.4, <=1.0.11), com.github.greengerong:green.monitor (>=1.0, <=1.4) +302 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (3.0.5.release)

org.springframework:spring-webmvc MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.0.4, =1.0, =1.0.1.ga, =1.0.0, =1.0, =2011.11.07.release...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2809 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41845 Source advisory: GHSA-3CHG-M5W7-QFV5...

at.molindo.social:spring-social-config (1.1.0.release), at.molindo.social:spring-social-security (1.1.0.release) +134 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.0.3.release)

org.springframework:spring-webmvc MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.molindo.social:spring-social-config 1.1.0.release -...

am.ik.home:uaa-client (>=1.3.0, <=1.8.1), am.ik.home:uaa-integration-test (>=1.3.0, <=1.8.1) +313 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.6.release)

org.springframework:spring-webmvc MAVEN version 4.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =0.0.1, =0.2.0, =1.0.8, =0.1.1, =0.1.1,...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-orm (1.2.2) +1 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (1.2.2)

org.springframework:spring-webmvc MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-orm 1.2.2 -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=2.0, <=2.2) +159 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.1.release)

org.springframework:spring-webmvc MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =2.0, =1.1.4-release, =1.1.4-release,...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +519 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.3.2.release)

org.springframework:spring-webmvc MAVEN version 4.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.mountain-pass:hyperstate-client =1, =1, =1, =1, =1, =1.0.0-rc, =0.0.26, =0.0.2...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.4.0) +6490 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.21)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41842 Source advisory: GHSA-X23C-287F-QQV5...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2809 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41842 Source advisory: GHSA-X23C-287F-QQV5...

com.github.yamingd.argo:argo-web (>=2.5.0, <=3.0.1), io.snappydata:gemfire-web (>=1.5.0-beta, <=2.0-beta) +29 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (3.2.12.release)

org.springframework:spring-webmvc MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.yamingd.argo:argo-web =2.5.0, =1.5.0-beta, =3.1.9-ga, =3.1.9-ga, =3.1.9-g...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-security (1.1.4.release) +178 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.1.8.release)

org.springframework:spring-webmvc MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...