com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring-boot-starter (>=2.3.12, <=2.3.20) +40 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.3.29.release)

org.springframework:spring-webmvc MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.fangjinuo.audit:audit-spring =2.3.12, =2.3.12, =4.0.1, =3.0.0, =3.0.0,...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +19563 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (>=5.0.0.release, <=5.3.39)

org.springframework:spring-webmvc MAVEN version =5.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-41841 Source advisory: OSV:GHSA-MQ64-J8F9-9GCJ...

com.cognifide.aet:cleaner (>=2.0.0-rc2, <=2.1.6), com.cognifide.aet:communication (>=2.0.0-rc2, <=2.1.6) +189 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.1.9.release)

org.springframework:spring-webmvc MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.cognifide.aet:cleaner =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1,...

com.51degrees:device-detection (>=4.4.1, <=4.4.2), com.51degrees:geo-location.web.examples.mvc (>=4.3.10, <=4.3.11) +132 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.3.30.release)

org.springframework:spring-webmvc MAVEN version 4.3.30.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.51degrees:device-detection =4.4.1, =4.3.10, =4.3.10, =4.3.14, =4.3.14, =4.3.14,...

am.ik.home:uaa-client (1.9.0), am.ik.home:uaa-integration-test (1.9.0) +619 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.3.7.release)

org.springframework:spring-webmvc MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.home:uaa-client 1.9.0 - am.ik.home:uaa-integration-test 1.9.0 -...

com.54chen:paoding-rose (1.0), com.54chen:paoding-rose-portal (1.0) +14 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (2.5.6.sec02)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.54chen:paoding-rose 1.0 - com.54chen:paoding-rose-portal 1.0 -...

cn.chenzw.swagger:swagger-ext-all (1.0.1), cn.chenzw.swagger:swagger-ext-core (1.0.1) +216 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.24.release)

org.springframework:spring-webmvc MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.chenzw.swagger:swagger-ext-all 1.0.1 - cn.chenzw.swagger:swagger-ext-core 1.0.1 -...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1) +474 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (4.3.16.release)

org.springframework:spring-webmvc MAVEN version 4.3.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1.release,...

com.foreach.across:across-web (3.1.2.release), com.foreach.imageserver:imageserver-admin (5.0.0.release) +156 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.3.21.release)

org.springframework:spring-webmvc MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.foreach.across:across-web 3.1.2.release -...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-captcha (>=1.5.13, <=1.5.13.2) +487 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.17.release)

org.springframework:spring-webmvc MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-captcha =1.5.13, =1.5.13, =1.5.13,...

ch.ralscha:extdirectspring (>=1.3.0, <=1.3.1), com.github.tuxychandru:spring-mustache (1.0) +48 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.2.1.release)

org.springframework:spring-webmvc MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.3.0, =0.3.0, =1.0, =1.1.1.release, =1.2.0.release -...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.1), com.bnd-lib:bnd-chemistry (0.7.0) +59 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (3.2.0.release)

org.springframework:spring-webmvc MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1 - com.bnd-lib:bnd-chemistry 0.7.0 -...

ch.ralscha:extdirectspring (1.6.1), com.aggrepoint.framework:winlet (>=0.1.6, <=0.1.17) +72 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.2.2.release)

org.springframework:spring-webmvc MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring 1.6.1 - com.aggrepoint.framework:winlet =0.1.6, =1.0.0-rc3...

org.apache.activemq:activemq-web (5.0.0), org.apache.activemq:activemq-web-console (5.0.0) +9 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (2.0.6)

org.springframework:spring-webmvc MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.activemq:activemq-web 5.0.0 - org.apache.activemq:activemq-web-console 5.0.0 -...

au.com.mountain-pass:hyperstate (>=4, <=9), ch.sbb.releasetrain:action (>=0.0.21, <=0.0.22) +493 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (4.2.6.release)

org.springframework:spring-webmvc MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =0.0.21,...

org.springframework:spring-webmvc-portlet (2.5.3), org.springframework:spring-webmvc-struts (2.5.3) potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.5.3)

org.springframework:spring-webmvc MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-webmvc-portlet 2.5.3 - org.springframework:spring-webmvc-struts...

cc.ecore:spring-jfinal (0.0.1), com.foreach.across.modules:spring-mobile-module (>=3.0.0.release, <=3.1.0.release) +37 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (3.2.13.release)

org.springframework:spring-webmvc MAVEN version 3.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cc.ecore:spring-jfinal 0.0.1 - com.foreach.across.modules:spring-mobile-module...

be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6), ch.ralscha:extdirectspring (1.7.1) +407 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (4.3.4.release)

org.springframework:spring-webmvc MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - be.looorent:jflu-producer-springmvc =0.1, =1.1, =1.0.10, =1.0, =1.0.7.oss, =1.0.7.oss...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7242 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41853 Source advisory: MEND:CVE-2026-41853...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0) +2809 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-41846 Source advisory: MEND:CVE-2026-41846...