io.github.aafc-bicoe:dina-base-api (>=0.168, <=0.182), net.tirasa.connid.bundles:net.tirasa.connid.bundles.rest (1.1.2) +7 more potentially affected by CVE-2026-86463 via org.apache.cxf:cxf-rt-rs-extension-search (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-extension-search MAVEN version =4.2.0, =0.168, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =8.0.0-rc2, =8.1.0-rc2 Source cves: CVE-2026-86463 Source advisory: MEND:CVE-2026-86463...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-73179 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.8 and more Source cves: CVE-2026-73179 Source advisory: MEND:CVE-2026-73179...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.2), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.2) potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-57817 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342000...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-57817 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342000...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.2), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.2) potentially affected by CVE-2026-65583 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-65583 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342036...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-65583 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-65583 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342036...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-65583 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-65583 Source advisory: MEND:CVE-2026-65583...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-57817 Source advisory: MEND:CVE-2026-57817...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.2), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.2) potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-57817 Source advisory: MEND:CVE-2026-57817...

org.apache.cxf.systests:cxf-systests-jaxrs (>=4.2.0, <=4.2.2), org.apache.cxf.systests:cxf-systests-transport-jms (>=4.2.0, <=4.2.2) +4 more potentially affected by CVE-2026-66909 via org.apache.cxf:cxf-rt-transports-jms (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-66909 Source advisory: MEND:CVE-2026-66909...

org.apache.cxf.systests:cxf-systests-uncategorized (3.0.16) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.0.16)

org.apache.cxf:cxf-integration-jca MAVEN version 3.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.0.16 Source cves: CVE-2026-50633 Sour...

org.apache.cxf.systests:cxf-systests-uncategorized (3.2.14) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.2.14)

org.apache.cxf:cxf-integration-jca MAVEN version 3.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.2.14 Source cves: CVE-2026-50633 Sour...

org.apache.cxf.systests:cxf-systests-uncategorized (3.0.0-milestone1) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.0.0-milestone1)

org.apache.cxf:cxf-integration-jca MAVEN version 3.0.0-milestone1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.0.0-milestone1 Source cves:...

org.apache.cxf.systests:cxf-systests-uncategorized (3.6.3) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.6.3)

org.apache.cxf:cxf-integration-jca MAVEN version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.6.3 Source cves: CVE-2026-50633 Source...

org.apache.cxf.systests:cxf-systests-uncategorized (2.7.15) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (2.7.15)

org.apache.cxf:cxf-integration-jca MAVEN version 2.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 2.7.15 Source cves: CVE-2026-50633 Sour...

org.apache.cxf.systests:cxf-systests-uncategorized (2.7.17) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (2.7.17)

org.apache.cxf:cxf-integration-jca MAVEN version 2.7.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 2.7.17 Source cves: CVE-2026-50633 Sour...

org.apache.cxf.systests:cxf-systests-uncategorized (2.7.18) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (2.7.18)

org.apache.cxf:cxf-integration-jca MAVEN version 2.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 2.7.18 Source cves: CVE-2026-50633 Sour...

org.apache.cxf.systests:cxf-systests-uncategorized (3.0.0-milestone2) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.0.0-milestone2)

org.apache.cxf:cxf-integration-jca MAVEN version 3.0.0-milestone2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.0.0-milestone2 Source cves:...