io.kaoto.forage:forage-cxf-starter (1.5.0), org.apache.camel.springboot:camel-cxf-soap-starter (>=4.19.0, <=4.20.0) +1 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-spring-soap (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-spring-soap MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879247...

org.apache.camel:camel-itest-spring32 (>=2.15.0, <=2.16.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.13.release)

org.springframework:spring-jms MAVEN version 3.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring32 =2.15.0, =2.16.0 Source cves: CVE-2026-41855 Source...

org.apache.camel:camel-itest-spring40 (>=2.15.2, <=2.17.7), org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support (>=2.2.1.release_1, <=2.3.0.release_1) +5 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.0.9.release)

org.springframework:spring-jms MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring40 =2.15.2, =2.2.1.release1, =1.0.0, =1.1.11.release,...

org.apache.camel:camel-itest-spring32 (>=2.16.1, <=2.16.5), org.apache.cxf.systests:cxf-systests-uncategorized (>=3.0.7, <=3.0.11) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.14.release)

org.springframework:spring-jms MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring32 =2.16.1, =3.0.7, =3.0.0-beta5, =3.0.0-rc1, =3.1.0...

org.apache.camel:camel-itest-spring32 (>=2.17.0, <=2.17.7), org.springframework.integration:spring-integration-jms (3.0.8.release) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.15.release)

org.springframework:spring-jms MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring32 =2.17.0, =2.17.7 -...

com.tencent.devops:devops-boot-starter-plugin (1.0.0), com.tencent.devops:devops-plugin-core (1.0.0) +3 more potentially affected by CVE-2024-38807 via org.springframework.boot:spring-boot-loader (>=3.3.1, <=3.3.2)

org.springframework.boot:spring-boot-loader MAVEN version =3.3.1, =3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-loader and may be impacted: - com.tencent.devops:devops-boot-starter-plugin 1.0.0 -...

com.alipay.sofa:ark-sofa-boot (4.1.0), com.alipay.sofa:ark-sofa-boot-starter (4.1.0) +2 more potentially affected by CVE-2024-38807 via org.springframework.boot:spring-boot-loader (>=3.1.0, <=3.1.12)

org.springframework.boot:spring-boot-loader MAVEN version =3.1.0, =4.0.0-rc1, =3.1.0, =3.1.12 Source cves: CVE-2024-38807 Source advisory: GHSA-7CJ3-X93G-GJ76...

com.tencent.devops:devops-boot-starter-plugin (1.0.0), com.tencent.devops:devops-plugin-core (1.0.0) +3 more potentially affected by CVE-2024-38807 via org.springframework.boot:spring-boot-loader (>=3.3.1, <=3.3.2)

org.springframework.boot:spring-boot-loader MAVEN version =3.3.1, =3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-loader and may be impacted: - com.tencent.devops:devops-boot-starter-plugin 1.0.0 -...

com.tencent.devops:devops-boot-starter-plugin (1.0.0), com.tencent.devops:devops-plugin-core (1.0.0) +3 more potentially affected by CVE-2024-38807 via org.springframework.boot:spring-boot-loader (>=3.3.1, <=3.3.2)

org.springframework.boot:spring-boot-loader MAVEN version =3.3.1, =3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-loader and may be impacted: - com.tencent.devops:devops-boot-starter-plugin 1.0.0 -...

org.apache.camel:camel-cxf (1.5.0), org.apache.camel:camel-example-cxf (1.5.0) +4 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.1.3)

org.apache.cxf:cxf-rt-management MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.camel:camel-cxf 1.5.0 - org.apache.camel:camel-example-cxf 1.5.0 -...