com.almis.awe:awe-boot (>=4.0.4, <=4.0.5), com.almis.awe:awe-controller (>=4.0.3, <=4.1.1) +20 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.14.release)

org.springframework:spring-websocket MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.almis.awe:awe-boot =4.0.4, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3,...

com.consol.citrus:citrus-websocket (2.7.3), com.estafet.microservices.scrum:microservices-scrum-parent-db (>=1.0.0, <=1.0.4) +236 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.11.release)

org.springframework:spring-websocket MAVEN version 4.3.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.consol.citrus:citrus-websocket 2.7.3 -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0), com.themodernway:themodernway-server-core (1.1.0-release) +286 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.10.release)

org.springframework:spring-websocket MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 3.0.0 -...

com.35liuqi:summer-web-framework (1.0), com.consol.citrus:citrus-websocket (2.7.2) +200 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.9.release)

org.springframework:spring-websocket MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.35liuqi:summer-web-framework 1.0 - com.consol.citrus:citrus-websocket 2.7.2...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.4, <=2.5), com.themodernway:themodernway-server-core (>=1.0.1-release, <=1.0.5-release) +55 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.7.release)

org.springframework:spring-websocket MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.4, =1.0.1-release, =1.0.1.1-releas...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.3), com.ahome-it:ahome-tooling-server-core (>=1.1.32-release, <=1.1.36-release) +38 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.6.release)

org.springframework:spring-websocket MAVEN version 4.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 2.3 -...

com.ahome-it:ahome-tooling-server-core (>=1.1.19-release, <=1.1.26-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.23-release, <=1.1.25-release) +114 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.4.release)

org.springframework:spring-websocket MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.19-release, =1.1.23-release,...

com.ahome-it:ahome-tooling-server-core (>=1.0.110-release, <=1.0.120-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.111-release, <=1.0.120-release) +10 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.1.release)

org.springframework:spring-websocket MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.0.110-release, =1.0.111-release,...

com.ahome-it:ahome-tooling-server-core (1.0.121-release), com.ahome-it:ahome-tooling-server-hazelcast (1.0.121-release) +5 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.2.release)

org.springframework:spring-websocket MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.0.121-release -...

com.consol.citrus:citrus-websocket (>=2.5, <=2.6), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=0.0.4, <=0.0.5) +11 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.3.release)

org.springframework:spring-websocket MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.consol.citrus:citrus-websocket =2.5, =0.0.4, =0.0.4, =0.1.3, =0.1.5, =6.2.1...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.5) +10 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.5.release)

org.springframework:spring-websocket MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.5 -...

com.ahome-it:ahome-tooling-server-core (>=1.1.0-release, <=1.1.1-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.0-release, <=1.1.1-release) +12 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.6.release)

org.springframework:spring-websocket MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.0-release, =1.1.0-release,...

org.springframework.boot:spring-boot-starter-websocket (1.3.8.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.8.release)

org.springframework:spring-websocket MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.3.8.release Source cve...

org.springframework.integration:spring-integration-websocket (4.2.13.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.2.9.release)

org.springframework:spring-websocket MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.integration:spring-integration-websocket 4.2.13.release...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.0, <=2.2), com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.9-release) +12 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.1.release)

org.springframework:spring-websocket MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.0, =1.1.4-release, =1.1.4-release,...

com.ahome-it:ahome-tooling-server-core (>=1.1.10-release, <=1.1.12-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.10-release, <=1.1.12-release) +110 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.2.release)

org.springframework:spring-websocket MAVEN version 4.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.10-release, =1.1.10-release,...

cn.zkdcloud:spring-springmvc-support (1.0), com.ahome-it:ahome-tooling-server-core (>=1.1.14-release, <=1.1.18-release) +142 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.3.release)

org.springframework:spring-websocket MAVEN version 4.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - cn.zkdcloud:spring-springmvc-support 1.0 - com.ahome-it:ahome-tooling-server-co...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ch.rasc:wamp2spring-security-servlet (4.0.0) +836 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=7.0.0, <=7.0.7)

org.springframework:spring-websocket MAVEN version =7.0.0, =4.13.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0, =1.21.9, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 - com.appjars:appjars-i18n-manager-flow 2.0.0 - com.codbex.atlas:codbex-atlas-application 2.110.0 and more Source cves: CVE-2026-41838 Source...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ch.rasc:wamp2spring-security-servlet (4.0.0) +836 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=7.0.0, <=7.0.7)

org.springframework:spring-websocket MAVEN version =7.0.0, =4.13.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0, =1.21.9, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 - com.appjars:appjars-i18n-manager-flow 2.0.0 - com.codbex.atlas:codbex-atlas-application 2.110.0 and more Source cves: CVE-2026-41838 Source...

at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21) +1095 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=6.2.0, <=6.2.18)

org.springframework:spring-websocket MAVEN version =6.2.0, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41838 Source advisory: OSV:GHSA-Q723-847Q-5G8G...