EUVD-2026-50975

Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser SWT Browser with JavaScript enabled. Using untrusted and compromised Initializr endpoints for the Spring Boot starter wizard can result in arbitrary script execution inside the embedded...

org.apache.cxf:cxf-eclipse-plugin (2.0.8) potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.0.8)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.8 Source cves: CVE-2026-50632 Source advisory:...

org.apache.cxf:cxf-eclipse-plugin (2.0.9) potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.0.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.9 Source cves: CVE-2026-50632 Source advisory:...

org.apache.camel:camel-example-cxf (1.4.0), org.apache.cxf:cxf-eclipse-plugin (2.1.1) potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.4.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.1 Sour...

org.apache.camel:camel-example-cxf (1.5.0), org.apache.cxf:cxf-eclipse-plugin (2.1.3) potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.3)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.5.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.3 Sour...

org.apache.cxf.systests:cxf-systests-transports (2.1.7), org.apache.cxf.systests:cxf-systests-uncategorized (2.1.7) +3 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.7)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports 2.1.7 -...

org.apache.cxf.systests:cxf-systests-transports (2.1.10), org.apache.cxf.systests:cxf-systests-uncategorized (2.1.10) +3 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports 2.1.10 -...

org.apache.cxf:apache-cxf (2.0.11), org.apache.cxf:cxf-distribution-manifest (2.0.11) +2 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.0.11)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:apache-cxf 2.0.11 - org.apache.cxf:cxf-distribution-manifest 2.0.11 -...

org.apache.cxf:cxf-eclipse-plugin (2.1.2), org.apache.servicemix.samples.cxf-wsdl-first:wsdl-first-cxf-sa (3.3) +1 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.1.2 -...

org.apache.camel:camel-example-cxf (1.5.0), org.apache.cxf:cxf-eclipse-plugin (2.1.3) potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.1.3)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.5.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.3 Sour...

org.apache.camel:camel-example-cxf (1.4.0), org.apache.cxf:cxf-eclipse-plugin (2.1.1) potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.1.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.4.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.1 Sour...

org.apache.cxf:cxf-eclipse-plugin (2.0.8) potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.0.8)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.8 Source cves: CVE-2026-44417 Source advisory:...

org.apache.cxf:cxf-eclipse-plugin (2.0.7), org.apache.servicemix.samples.cxf-wsdl-first:wsdl-first-cxf-sa (3.2.2) +4 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.0.7)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.7 -...

org.apache.cxf:cxf-eclipse-plugin (2.0.9) potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.0.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.9 Source cves: CVE-2026-44417 Source advisory:...

org.apache.cxf.systests:cxf-systests-transports (2.1.10), org.apache.cxf.systests:cxf-systests-uncategorized (2.1.10) +3 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.1.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports 2.1.10 -...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

pgcodekeeper security vulnerability

pgCodeKeeper is an open source Eclipse plugin for database schema management from pgCodeKeeper. A security vulnerability exists in pgcodekeeper version 10.12.0, which stems from storing passwords and usernames in clear text and could lead to the disclosure of sensitive information...

org.apache.camel:camel-example-cxf (1.4.0), org.apache.cxf:cxf-eclipse-plugin (2.1.1) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.4.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.1 Sour...

org.apache.cxf:cxf-eclipse-plugin (2.0.9) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.0.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.9 Source cves: CVE-2025-48913 Source advisory:...

org.apache.camel:camel-example-cxf (1.5.0), org.apache.cxf:cxf-eclipse-plugin (2.1.3) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.3)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.5.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.3 Sour...