dev.dsf:dsf-maven-plugin (2.0.1) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.0.1)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf:dsf-maven-plugin 2.0.1 Source cves: CVE-2026-40942 Source advisory: OSV:GHSA-XMJ9-7625-F634...

dev.dsf:dsf-maven-plugin (2.0.2) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.0.2)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf:dsf-maven-plugin 2.0.2 Source cves: CVE-2026-40942 Source advisory: OSV:GHSA-XMJ9-7625-F634...

dev.dsf:dsf-maven-plugin (>=2.0.0-m3, <=2.0.2) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (>=2.0.0-m3, <=2.0.2)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version =2.0.0-m3, =2.0.0-m3, =2.0.2 Source cves: CVE-2026-40942 Source advisory: GHSA-XMJ9-7625-F634...

dev.dsf.linter:linter-core (0.1.3), dev.dsf:dsf-maven-plugin (2.1.0) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.1.0)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf.linter:linter-core 0.1.3 - dev.dsf:dsf-maven-plugin 2.1.0 Source cves: CVE-2026-40942 Sourc...

dev.dsf:dsf-maven-plugin (2.1.1) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.1.1)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf:dsf-maven-plugin 2.1.1 Source cves: CVE-2026-40942 Source advisory: OSV:GHSA-XMJ9-7625-F634...

dev.dsf:dsf-maven-plugin (2.0.0-rc1) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.0.0-rc1)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf:dsf-maven-plugin 2.0.0-rc1 Source cves: CVE-2026-40942 Source advisory:...

dev.dsf:dsf-maven-plugin (2.0.0) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.0.0)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf:dsf-maven-plugin 2.0.0 Source cves: CVE-2026-40942 Source advisory: OSV:GHSA-XMJ9-7625-F634...

dev.dsf:dsf-maven-plugin (2.0.0-m3) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.0.0-m3)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.0.0-m3 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf:dsf-maven-plugin 2.0.0-m3 Source cves: CVE-2026-40942 Source advisory:...

dev.dsf:dsf-maven-plugin (2.0.0-m4) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.0.0-m4)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.0.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf:dsf-maven-plugin 2.0.0-m4 Source cves: CVE-2026-40942 Source advisory:...

dev.dsf:dsf-maven-plugin (2.0.0-rc2) potentially affected by CVE-2026-40942 via dev.dsf:dsf-bpe-process-api-v2 (2.0.0-rc2)

dev.dsf:dsf-bpe-process-api-v2 MAVEN version 2.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dev.dsf:dsf-bpe-process-api-v2 and may be impacted: - dev.dsf:dsf-maven-plugin 2.0.0-rc2 Source cves: CVE-2026-40942 Source advisory:...

org.keycloak:keycloak-crypto-fips1402 (25.0.3), org.keycloak:keycloak-dependencies-server-all (25.0.3) +12 more potentially affected by CVE-2026-37980 via org.keycloak:keycloak-services (25.0.3)

org.keycloak:keycloak-services MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-crypto-fips1402 25.0.3 - org.keycloak:keycloak-dependencies-server-all 25.0....

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.3) +5 more potentially affected by CVE-2026-39304 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2026-39304 Source advisory: OSV:GHSA-5568-6QCG-G7FX...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.3) +5 more potentially affected by CVE-2026-39304 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2026-39304 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-15992453...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.3) +5 more potentially affected by CVE-2026-39304 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2026-39304 Source advisory: GHSA-5568-6QCG-G7FX...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.3) +5 more potentially affected by CVE-2025-66168 +1 more via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2025-66168, CVE-2026-40046 Source advisory: OSV:GHSA-XVQC-PP94-FMPX...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.3) +5 more potentially affected by CVE-2025-66168 +1 more via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2025-66168, CVE-2026-40046 Source advisory: GHSA-XVQC-PP94-FMPX...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.1) +5 more potentially affected by CVE-2026-33227 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.1 Source cves: CVE-2026-33227 Source advisory: GHSA-H2H4-5M64-M273...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.2) +5 more potentially affected by CVE-2026-34197 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.2)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.2 Source cves: CVE-2026-34197 Source advisory: OSV:GHSA-RXPJ-7QVF-XV32...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.2) +5 more potentially affected by CVE-2026-34197 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.2)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.2 Source cves: CVE-2026-34197 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-16032379...

fr.cnieg.keycloak:attribute-login-provider (1.3.8), io.phasetwo.keycloak:keycloak-extensions (0.1) +24 more potentially affected by CVE-2026-37977 via org.keycloak:keycloak-services (22.0.3)

org.keycloak:keycloak-services MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.8 - io.phasetwo.keycloak:keycloak-extensions 0.1 -...