br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +78 more potentially affected by CVE-2026-47850 via org.springframework.data:spring-data-rest-webmvc (>=4.5.0, <=4.5.12)

org.springframework.data:spring-data-rest-webmvc MAVEN version =4.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-47850 Source advisory: MEND:CVE-2026-47850...

CVE-2026-13749

Snowflake CLI prior to 3.19 is affected by Improper neutralization in the Snowpark annotation processor callback template, enabling arbitrary code execution during bundling or deployment. An attacker can supply crafted project content that is interpolated into generated Python code, causing code ...

CVE-2026-13749 Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generate...

CVE-2026-13749 Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generate...

CVE-2026-13749: Improper Control of Generation of Code

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generate...

be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9), be.appify.prefab:prefab-core (0.2.0) +172 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (>=4.0.0, <=4.0.5)

org.springframework.kafka:spring-kafka MAVEN version =4.0.0, =0.2.0, =0.2.0, =7.0.0-alpha-springboot4, =7.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =12.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =2.0.0-alpha-springboot4,...

be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9), be.appify.prefab:prefab-core (0.2.0) +482 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-relational MAVEN version =4.0.0, =0.2.0, =0.5.0, =0.2.0, =0.2.0, =4.0.6.117.0, =4.0.6.117.0, =4.0.6.117.1, =0.4.7, =1.1.0 and more Source cves: CVE-2026-41697 Source advisory: OSV:GHSA-8R2H-XH92-GQ57...

br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +82 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (>=4.5.0, <=4.5.11)

org.springframework.data:spring-data-rest-core MAVEN version =4.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41730 Source advisory: MEND:CVE-2026-41730...

br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +76 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-webmvc (>=4.5.0, <=4.5.11)

org.springframework.data:spring-data-rest-webmvc MAVEN version =4.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41729 Source advisory: MEND:CVE-2026-41729...

app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2327 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41721 Source advisory: MEND:CVE-2026-41721...

br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +147 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (>=2.5.0, <=2.5.2)

org.springframework.hateoas:spring-hateoas MAVEN version =2.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41006 Source advisory: GHSA-7FXC-486F-32Q9...

org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta2) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.1.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.1.0.beta2 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.1.0.cr1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.1.0.cr1)

org.hibernate:hibernate-validator MAVEN version 4.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.1.0.cr1 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.2.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta1 Source cves:...

com.github.bingoohuang:quartz-glass (>=0.0.1, <=0.0.9), org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.1.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.bingoohuang:quartz-glass =0.0.1, =0.0.9 -...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta2) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.2.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta2 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.cr1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.2.0.cr1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.cr1 Source cves:...

br.com.ingenieux.cloudy:cloudy-data (0.0.4), org.hibernate:hibernate-validator-annotation-processor (4.3.0.alpha1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.3.0.alpha1)

org.hibernate:hibernate-validator MAVEN version 4.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.ingenieux.cloudy:cloudy-data 0.0.4 -...

com.github.bingoohuang:quartz-glass (>=0.0.1, <=0.0.9), org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta1) potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (4.1.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.bingoohuang:quartz-glass =0.0.1, =0.0.9 -...

org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta2) potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (4.1.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.1.0.beta2 Source cves:...