io.mosip.kernel:kernel-config-server (>=1.1.2-rc2, <=1.1.2), org.springframework.cloud:spring-cloud-config-monitor (2.0.4.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.0.4.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - io.mosip.kernel:kernel-config-server =1.1.2-rc2...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=6.0.1, <=6.1.0-rc2), org.apereo.cas:cas-server-webapp-config-server (>=6.0.1, <=6.1.0-rc1) +10 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.springframework.cloud:spring-cloud-config-monitor (2.1.6.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.6.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (>=2.1.3.release, <=2.1.4.release), org.springframework.cloud:spring-cloud-config-monitor (2.1.9.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.9.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

com.mayhoo:config-server (3.0.2), com.okta.spring.examples:okta-spring-boot-cloud-config-example (>=3.0.3, <=3.0.8) +26 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (>=4.0.0, <=4.1.7)

org.springframework.cloud:spring-cloud-config-server MAVEN version =4.0.0, =3.0.3, =0.5, =0.0.1, =1.2.1-rc1, =2026.0-19, =2026.0-19, =2026.1-10, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.1.3 and more Source cves: CVE-2026-22739 Source advisory:...

com.okta.spring.examples:okta-spring-boot-cloud-config-example (>=1.2.0, <=1.3.0), org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=6.1.0-rc3, <=6.1.0-rc4) +2 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.2.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.springframework.cloud:spring-cloud-config-monitor (2.1.8.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.8.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (>=2020.0.rc1, <=2021.1), com.bpfaas:bps-config-server-novault-spring-cloud-starter (3.2.2) +38 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (>=3.0.0, <=3.1.10)

org.springframework.cloud:spring-cloud-config-server MAVEN version =3.0.0, =2020.0.rc1, =3.0.0, =2.1.0, =0.1, =0.0.3, =0.8.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =5.79.0, =5.95.0 and more Source cves: CVE-2026-2...

org.apereo.cas:cas-management-webapp (>=5.0.0.rc3, <=5.0.1), org.apereo.cas:cas-management-webapp-support (>=5.0.0.rc3, <=5.0.1) +103 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.2.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.rc3...

com.tairanchina.csp.dew:config (>=1.5.0-beta, <=1.5.1-rc), org.springframework.cloud:spring-cloud-config-monitor (1.4.4.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.4.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - com.tairanchina.csp.dew:config =1.5.0-beta,...

net.smartcosmos:smartcosmos-config-server (3.0.1), org.apereo.cas:cas-management-webapp-support (5.0.0.m3) +83 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.1.2.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - net.smartcosmos:smartcosmos-config-server 3.0.1...

org.springframework.cloud:spring-cloud-config-monitor (1.4.1.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.springframework.cloud:spring-cloud-config-monitor (2.1.5.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.5.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

com.ecfront.dew:config (>=1.0.0, <=1.1.1), org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.1.0-rc4, <=5.1.9) +2 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.3.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - com.ecfront.dew:config =1.0.0, =5.1.0-rc4,...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=8.0.0-rc1, <=8.0.0-rc2), org.apereo.cas:cas-server-webapp-init-config-server (>=8.0.0-rc1, <=8.0.0-rc2) +3 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (>=5.0.0-m1, <=5.0.1)

org.springframework.cloud:spring-cloud-config-server MAVEN version =5.0.0-m1, =8.0.0-rc1, =8.0.0-rc1, =5.0.0-m1, =5.0.0-m1, =5.0.1 Source cves: CVE-2026-22739 Source advisory: GHSA-3QWQ-Q9VM-5J42...

com.ecfront.dew:config (1.2.2-rc), com.ixortalk:ixortalk-config-server (2.0.0) +3 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.3.2.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - com.ecfront.dew:config 1.2.2-rc -...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1) +27 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.4.3.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1,...

com.alibaba.cloud:spring-cloud-alibaba-nacos-config-server (>=2.0.0.release, <=2.0.1.release), com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (>=2.0.2.release, <=2.0.4.release) +1 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.0.5.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

it.cnr.si:parco-auto (>=1.0.2, <=2.0.24), it.cnr.si:telefonia-mobile (>=0.0.2, <=2.0.24) +2 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.0.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - it.cnr.si:parco-auto =1.0.2, =0.0.2, =2.0.24 -...

com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (>=2.2.7.release, <=2.2.8.release), com.buession.springcloud:buession-springcloud-config-server (>=1.3.0, <=2.3.3) +19 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.2.8.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...