com.github.eventasia:eventasia-stream-kafka (>=0.0.12.release, <=0.0.13.release), org.apereo.cas:cas-server-core-configuration-cloud-kafka (>=5.1.0-rc4, <=5.1.9) +1 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.2.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.eventasia:eventasia-stream-kafka =0.0.12.release, =5.1.0-rc4,...

com.github.eventasia:event-store (>=0.0.1.release, <=0.0.3.release), com.github.eventasia:eventasia-starter (>=0.0.4.release, <=0.0.10.release) +4 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.0.2.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.eventasia:event-store =0.0.1.release, =0.0.4.release,...