com.github.eventasia:eventasia-stream-kafka (>=0.0.12.release, <=0.0.13.release), org.apereo.cas:cas-server-core-configuration-cloud-kafka (>=5.1.0-rc4, <=5.1.9) +1 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.2.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.eventasia:eventasia-stream-kafka =0.0.12.release, =5.1.0-rc4,...

com.github.pscosta:kafka-proto-api (1.0), org.apereo.cas:cas-server-core-configuration-cloud-kafka (5.2.0-rc4) +1 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.2.3.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.pscosta:kafka-proto-api 1.0 -...

com.github.eventasia:eventasia-stream-kafka (>=0.0.12.release, <=0.0.13.release), org.apereo.cas:cas-server-core-configuration-cloud-kafka (>=5.1.0-rc4, <=5.1.9) +1 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.2.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.eventasia:eventasia-stream-kafka =0.0.12.release, =5.1.0-rc4,...

com.github.pscosta:kafka-proto-api (1.0), org.apereo.cas:cas-server-core-configuration-cloud-kafka (5.2.0-rc4) +1 more potentially affected by CVE-2026-41731 via org.springframework.kafka:spring-kafka (1.2.3.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.pscosta:kafka-proto-api 1.0 -...

com.github.eventasia:eventasia-stream-kafka (>=0.0.12.release, <=0.0.13.release), org.apereo.cas:cas-server-core-configuration-cloud-kafka (>=5.1.0-rc4, <=5.1.9) +1 more potentially affected by CVE-2026-41731 via org.springframework.kafka:spring-kafka (1.2.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.eventasia:eventasia-stream-kafka =0.0.12.release, =5.1.0-rc4,...

com.github.krraghavan:mongodb-aggregate-query-support (>=0.7.1, <=0.7.17), org.apereo.cas:cas-server-core-api (5.1.0-rc2) +31 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.krraghavan:mongodb-aggregate-query-support =0.7.1,...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.2.0-rc1, <=5.2.0-rc3), org.springframework.amqp:spring-rabbit (1.6.10.release) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.6.10.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-amqp =5.2.0-rc1,...

com.orange.fiware:openlpwa-iotagent (>=1.0.1, <=1.0.2), de.digitalcollections:iiif-bookshelf-webapp (>=2.2.0, <=2.3.0) +109 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.8.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.orange.fiware:openlpwa-iotagent =1.0.1, =2.2.0, =5.0.0.m1,...

com.github.aidensuen:mongodao-core (>=1.0.1, <=1.1.2), com.github.aidensuen:mongodao-pagehelper (>=1.0.3, <=1.1.2) +30 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.aidensuen:mongodao-core =1.0.1, =1.0.3, =1.0.3,...

com.github.lodsve:lodsve-amqp (>=2.5.8, <=2.5.9), org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.0.2, <=5.0.10) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.6.4.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.lodsve:lodsve-amqp =2.5.8, =5.0.2, =5.0.10 -...

com.ahome-it:ahome-tooling-server-core (1.1.0-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.0-release) +151 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.5.6.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.1.0-release -...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.1.0-rc4, <=5.1.9), org.springframework.amqp:spring-rabbit (1.6.8.release) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.6.8.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-amqp =5.1.0-rc4,...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.2.0-rc1, <=5.2.0-rc3), org.springframework.amqp:spring-rabbit (1.6.10.release) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.6.10.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-amqp =5.2.0-rc1,...

com.github.inspektr:inspektr-support-spring (1.0.0.ga), org.jasig.cas3.extensions:clearpass-impl (>=1.0.1.ga, <=1.0.5.ga) +25 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.0.1.release)

org.springframework:spring-webmvc MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.inspektr:inspektr-support-spring 1.0.0.ga -...

io.vilt.minium.developer:minium-developer-bundle (>=1.9.5, <=2.6.0), io.vilt.minium.developer:minium-developer-fs (>=1.9.5, <=2.6.0) +32 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.19.release)

org.springframework:spring-websocket MAVEN version 4.3.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - io.vilt.minium.developer:minium-developer-bundle =1.9.5, =1.9.5, =1.9.5,...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.3.0-rc1, <=5.3.0-rc3), org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=5.3.0-rc4, <=5.3.16) +3 more potentially affected by CVE-2026-40982 via org.springframework.cloud:spring-cloud-config-server (1.4.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

io.choerodon:choerodon-starter-config-monitor (>=0.5.0.release, <=0.6.4.release), org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.2.0, <=5.2.9) +2 more potentially affected by CVE-2026-40982 via org.springframework.cloud:spring-cloud-config-server (1.3.3.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - io.choerodon:choerodon-starter-config-monitor...

ch.ralscha:extdirectspring (>=1.0.2, <=1.0.3), com.github.rgladwell:spring-mvc-util (>=1.0.3, <=1.0.6) +30 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (3.0.4.release)

org.springframework:spring-webmvc MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.0.2, =1.0.3, =0.7.1, =1.3, =1.3, =1.3, =1.3.1 -...

org.apache.rya:rya.export.accumulo (>=4.0.0-incubating, <=4.0.1), org.apache.rya:rya.indexing.example (>=4.0.0-incubating, <=4.0.1) +30 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (3.2.15.release)

org.springframework:spring-webmvc MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.rya:rya.export.accumulo =4.0.0-incubating, =4.0.0-incubating,...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (0.0.15), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (0.0.15) +67 more potentially affected by CVE-2026-40972 via org.springframework.boot:spring-boot-devtools (1.3.5.release)

org.springframework.boot:spring-boot-devtools MAVEN version 1.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-devtools and may be impacted: -...