org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (>=1.3.0, <=1.7.2), org.apache.cxf.fediz:fediz-idp (>=1.3.0, <=1.7.2) +6 more potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=3.1.6, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =3.1.6, =1.3.0, =1.3.0, =1.4.0, =1.3.0, =3.1.7, =3.3.0, =2.0.9, =2.0.9, =2.1.14 Source cves: CVE-2026-57817 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342000...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (>=1.3.0, <=1.7.2), org.apache.cxf.fediz:fediz-idp (>=1.3.0, <=1.7.2) +6 more potentially affected by CVE-2026-65583 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=3.1.6, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =3.1.6, =1.3.0, =1.3.0, =1.4.0, =1.3.0, =3.1.7, =3.3.0, =2.0.9, =2.0.9, =2.1.14 Source cves: CVE-2026-65583 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342036...

org.apache.camel:camel-linkedin (>=2.18.4, <=2.19.3), org.apache.camel:camel-linkedin-api (>=2.18.4, <=2.19.3) +14 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.1.11)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel:camel-linkedin =2.18.4, =2.18.4, =2.18.4, =2.18.4,...

org.apache.camel:camel-linkedin (>=2.18.4, <=2.19.3), org.apache.camel:camel-linkedin-api (>=2.18.4, <=2.19.3) +13 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.11)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel:camel-linkedin =2.18.4, =2.18.4, =2.18.4, =2.18.4, =2.18.4,...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (1.7.2), org.apache.cxf.fediz:fediz-idp (1.7.2) +8 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.6.10)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpweba...

org.apache.camel:camel-linkedin (>=2.17.3, <=2.18.0), org.apache.camel:camel-linkedin-api (>=2.17.3, <=2.18.0) +11 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel:camel-linkedin =2.17.3, =2.17.3, =2.18.0 -...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (>=1.3.3, <=1.4.3), org.apache.cxf.fediz:fediz-idp (>=1.3.3, <=1.4.3) +7 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.14)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpweba...

com.github.waffle.demo:waffle-spring-filter (3.0.0), com.github.waffle.demo:waffle-spring-form (3.0.0) +23 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.19.release)

org.springframework.security:spring-security-web MAVEN version 4.2.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.waffle.demo:waffle-spring-filter 3.0.0 -...

com.github.waffle:waffle-tomcat7 (1.8.3), org.apache.cxf.fediz.examples.wsclientwebapp:webapp (>=1.2.4, <=1.4.1) +6 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat7 1.8.3 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp...

org.apache.cxf.fediz:fediz-tomcat8 (>=1.4.0, <=1.4.1), org.apache.tomcat:tomcat-catalina-ha (8.5.12) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 =1.4.0, =1.4.1 - org.apache.tomcat:tomcat-catalina-ha...

com.github.waffle:waffle-tomcat7 (1.8.3), org.apache.cxf.fediz.examples.wsclientwebapp:webapp (>=1.2.4, <=1.4.1) +6 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat7 1.8.3 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp...

com.github.waffle:waffle-tomcat7 (1.8.3), org.apache.cxf.fediz.examples.wsclientwebapp:webapp (>=1.2.4, <=1.4.1) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat7 1.8.3 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp...

org.apache.cxf.fediz:fediz-tomcat8 (>=1.4.0, <=1.4.1), org.apache.tomcat:tomcat-catalina-ha (8.5.12) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 =1.4.0, =1.4.1 - org.apache.tomcat:tomcat-catalina-ha...

org.apache.cxf.fediz:fediz-tomcat8 (>=1.4.0, <=1.4.1), org.apache.tomcat:tomcat-catalina-ha (8.5.12) +6 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 =1.4.0, =1.4.1 - org.apache.tomcat:tomcat-catalina-ha...

org.apache.cxf.fediz:fediz-tomcat8 (1.4.5), org.apache.tomcat:tomcat-catalina (8.5.34) +7 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.34)

org.apache.tomcat:tomcat-coyote MAVEN version 8.5.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 1.4.5 - org.apache.tomcat:tomcat-catalina 8.5.34 -...

EUVD-2018-0594

Malware in sbrugna...

org.apache.cxf.fediz:fediz-tomcat8 (>=1.4.0, <=1.4.1), org.apache.tomcat:tomcat-catalina-ha (8.5.12) +6 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 =1.4.0, =1.4.1 - org.apache.tomcat:tomcat-catalina-ha...

com.github.waffle:waffle-tomcat8 (1.8.3), org.apache.cxf.fediz:fediz-tomcat8 (1.3.2) +8 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.0.41)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat8 1.8.3 - org.apache.cxf.fediz:fediz-tomcat8 1.3.2 -...

com.github.waffle:waffle-tomcat7 (1.8.3), org.apache.cxf.fediz.examples.wsclientwebapp:webapp (>=1.2.4, <=1.4.1) +6 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat7 1.8.3 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-samlidpwebapp (>=1.2.0, <=1.2.1), org.apache.cxf.fediz:fediz-idp (>=1.2.0, <=1.2.1) +2 more potentially affected by CVE-2015-5253 via org.apache.cxf:cxf-rt-rs-security-sso-saml (>=3.0.0, <=3.0.6)

org.apache.cxf:cxf-rt-rs-security-sso-saml MAVEN version =3.0.0, =1.2.0, =1.2.0, =3.0.5, =3.0.0, =3.0.6 Source cves: CVE-2015-5253 Source advisory: OSV:GHSA-3336-H95J-HVVF...