com.brihaspathee.artemis:config-server (>=0.0.1, <=1.0.2), com.brihaspathee.sapphire:config-server (>=1.0.0, <=1.0.7) +6 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (>=4.2.0, <=4.2.4)

org.springframework.cloud:spring-cloud-config-server MAVEN version =4.2.0, =0.0.1, =1.0.0, =3.0.9, =0.1.41-beta, =7.2.0-rc3, =7.2.0-rc3, =4.2.0, =3.2.0, =3.2.3 Source cves: CVE-2026-22739 Source advisory: OSV:GHSA-3QWQ-Q9VM-5J42...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.0.m2), org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.0.m2) +85 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.1.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.m1,...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=8.0.0-rc1, <=8.0.0-rc2), org.apereo.cas:cas-server-webapp-init-config-server (>=8.0.0-rc1, <=8.0.0-rc2) +3 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (>=5.0.0-m1, <=5.0.1)

org.springframework.cloud:spring-cloud-config-server MAVEN version =5.0.0-m1, =8.0.0-rc1, =8.0.0-rc1, =5.0.0-m1, =5.0.0-m1, =5.0.1 Source cves: CVE-2026-22739 Source advisory: OSV:GHSA-3QWQ-Q9VM-5J42...

com.ecfront.dew:config (>=1.1.2, <=1.1.4), org.apereo.cas:cas-server-core-configuration-cloud-amqp (5.2.0-rc1) +11 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.3.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - com.ecfront.dew:config =1.1.2, =1.0.0.release,...

ai.hyacinth.framework:core-service-config-server (>=0.5.2, <=0.5.5), com.alibaba.cloud:spring-cloud-alibaba-nacos-config-server (2.1.0.release) +3 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.3.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - ai.hyacinth.framework:core-service-config-serve...

com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (>=2020.0.rc1, <=2021.1), com.bpfaas:bps-config-server-novault-spring-cloud-starter (3.2.2) +38 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (>=3.0.0, <=3.1.10)

org.springframework.cloud:spring-cloud-config-server MAVEN version =3.0.0, =2020.0.rc1, =3.0.0, =2.1.0, =0.1, =0.0.3, =0.8.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =5.79.0, =5.95.0 and more Source cves: CVE-2026-2...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.microservices:cloud-altemistafwk-core-microservices-config-conf (3.1.0.release) +8 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.2.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

com.buession.springcloud:buession-springcloud-config-server (>=1.2.1, <=1.2.2), org.openwms:org.openwms.configuration (1.2.0) +3 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.2.7.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

io.openexchange:configserver (1.0.3), org.apereo.cas:cas-management-webapp (>=5.0.2, <=5.0.10) +106 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.2.2.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - io.openexchange:configserver 1.0.3 -...

io.github.ilyaslabs.foodstack:configserver (0.0.1), io.github.ilyaslabs:spring-boot-microservice-config-server (1.0.0) +9 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (>=4.3.0, <=4.3.1)

org.springframework.cloud:spring-cloud-config-server MAVEN version =4.3.0, =1.0.1, =7.3.0-rc2, =7.3.0-rc2, =26.01.01, =2.3.0, =4.3.0, =3.3.0, =3.3.1 - team.isaz.ark4test.cfgguard:config-guard-starter 1.0.0 - team.isaz.ark4test.cfgguard:config-guard-testkit 1.0.0 Source cves: CVE-2026-22739 Source...

io.mosip.kernel:kernel-config-server (1.0.6), org.springframework.cloud.stream.app:spring-cloud-stream-app-starters-docs (>=darwin.release, <=darwin.sr1) +1 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.0.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - io.mosip.kernel:kernel-config-server 1.0.6 -...

cn.ipokerface:spring-cloud-config-server (1.0.0), com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (2.2.1.release) +26 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.2.2.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - cn.ipokerface:spring-cloud-config-server 1.0.0 ...

com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (2.1.2.release), org.springframework.cloud:spring-cloud-config-monitor (2.1.7.release) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.7.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

ai.hyacinth.framework:core-service-config-server (0.5.0), org.springframework.cloud.stream.app:spring-cloud-stream-app-starters-docs (>=einstein.sr1, <=einstein.sr3) +2 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - ai.hyacinth.framework:core-service-config-serve...

com.bpfaas:bps-config-server-novault-spring-cloud-starter (>=3.0.1.release, <=3.0.3.release), com.bpfaas:bps-config-server-spring-cloud-starter (>=3.0.1.release, <=3.0.3.release) +6 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.2.3.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (>=2.2.5.rocketmq.rc2, <=2.2.6.release), com.github.niupengyu:ahead-frame-commons (1.2.5-release) +12 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.2.6.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

io.github.ilyaslabs.foodstack:configserver (0.0.1), io.github.ilyaslabs:spring-boot-microservice-config-server (1.0.0) +9 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (>=4.3.0, <=4.3.1)

org.springframework.cloud:spring-cloud-config-server MAVEN version =4.3.0, =1.0.1, =7.3.0-rc2, =7.3.0-rc2, =26.01.01, =2.3.0, =4.3.0, =3.3.0, =3.3.1 - team.isaz.ark4test.cfgguard:config-guard-starter 1.0.0 - team.isaz.ark4test.cfgguard:config-guard-testkit 1.0.0 Source cves: CVE-2026-22739 Source...

com.ixortalk:ixortalk-test (>=1.0.0, <=1.1.3), com.thinkbiganalytics.kylo.plugins:kylo-hadoop-authorization-ranger (>=0.8.3, <=0.9.1) +105 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.1.3.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - com.ixortalk:ixortalk-test =1.0.0, =0.8.3,...

com.alibaba.cloud:spring-cloud-starter-alibaba-nacos-config-server (>=2.2.2.release, <=2.2.5.release), com.geektcp.common:thy-common-config (>=1.0.0, <=1.0.7) +13 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.2.5.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

cn.home1:oss-configserver (>=1.0.6.oss, <=1.0.7.oss) potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (1.2.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - cn.home1:oss-configserver =1.0.6.oss, =1.0.7.os...