com.github.mcollovati.vertx:vaadin-flow-sockjs (17.0.0), com.github.mcollovati.vertx:vertx-vaadin-flow (17.0.0) +18 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (4.0.1)

com.vaadin:flow-server MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.github.mcollovati.vertx:vaadin-flow-sockjs 17.0.0 - com.github.mcollovati.vertx:vertx-vaadin-flow 17.0.0 -...

com.vaadin:flow (1.4.7), com.vaadin:flow-client (1.4.7) +15 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (1.4.7)

com.vaadin:flow-server MAVEN version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 1.4.7 - com.vaadin:flow-client 1.4.7 - com.vaadin:flow-code-generator 1.4.7 -...

com.vaadin:flow (2.0.7), com.vaadin:flow-client (2.0.7) +21 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (2.0.7)

com.vaadin:flow-server MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 2.0.7 - com.vaadin:flow-client 2.0.7 - com.vaadin:flow-code-generator 2.0.7 -...

com.vaadin:flow (3.1.7), com.vaadin:flow-client (3.1.7) +14 more potentially affected by CVE-2026-2742 via com.vaadin:flow-server (3.1.7)

com.vaadin:flow-server MAVEN version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:flow-server and may be impacted: - com.vaadin:flow 3.1.7 - com.vaadin:flow-client 3.1.7 - com.vaadin:flow-component-demo-helpers 3.1.7 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.1.8) +5 more potentially affected by CVE-2025-66168 via org.apache.activemq:activemq-all (>=6.0.0, <=6.1.8)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.8 Source cves: CVE-2025-66168 Source advisory: GHSA-C825-6PH3-4H84...

org.apache.activemq.tooling:activemq-maven-plugin (6.2.0), org.apache.activemq:activemq-osgi (6.2.0) +4 more potentially affected by CVE-2025-66168 via org.apache.activemq:activemq-all (6.2.0)

org.apache.activemq:activemq-all MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-all and may be impacted: - org.apache.activemq.tooling:activemq-maven-plugin 6.2.0 - org.apache.activemq:activemq-osgi 6.2...

org.apache.activemq.tooling:activemq-maven-plugin (6.2.0), org.apache.activemq:activemq-osgi (6.2.0) +4 more potentially affected by CVE-2025-66168 via org.apache.activemq:activemq-all (6.2.0)

org.apache.activemq:activemq-all MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-all and may be impacted: - org.apache.activemq.tooling:activemq-maven-plugin 6.2.0 - org.apache.activemq:activemq-osgi 6.2...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.1.8) +5 more potentially affected by CVE-2025-66168 via org.apache.activemq:activemq-all (>=6.0.0, <=6.1.8)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.8 Source cves: CVE-2025-66168 Source advisory: OSV:GHSA-C825-6PH3-4H84...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.3) +5 more potentially affected by CVE-2025-66168 +1 more via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2025-66168, CVE-2026-40046 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-15426350...

org.apache.activemq.tooling:activemq-maven-plugin (6.2.0), org.apache.activemq:activemq-osgi (6.2.0) +4 more potentially affected by CVE-2025-66168 +1 more via org.apache.activemq:activemq-all (6.2.0)

org.apache.activemq:activemq-all MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.activemq:activemq-all and may be impacted: - org.apache.activemq.tooling:activemq-maven-plugin 6.2.0 - org.apache.activemq:activemq-osgi 6.2...

com.qulice:qulice-ant (0.13), com.qulice:qulice-maven-plugin (0.13) +20 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.3.3)

net.sourceforge.pmd:pmd-core MAVEN version 5.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.qulice:qulice-ant 0.13 - com.qulice:qulice-maven-plugin 0.13 - com.qulice:qulice-pmd 0.13 -...

ch.acanda.maven:code-analysis-maven-plugin (1.3.0), de.firemage.autograder:autograder-core (0.4) +39 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.53.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - ch.acanda.maven:code-analysis-maven-plugin 1.3.0 - de.firemage.autograder:autograder-core 0.4 -...

ch.acanda.maven:code-analysis-maven-plugin (1.5.0), com.eventoframework:evento-cli (>=ev1.4.1, <=ev1.15.5) +66 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.55.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.55.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - ch.acanda.maven:code-analysis-maven-plugin 1.5.0 - com.eventoframework:evento-cli =ev1.4.1, =ev1.4.1,...

ch.acanda.maven:code-analysis-maven-plugin (0.16.0), edu.hm.hafner:analysis-model (10.17.0) +37 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.49.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - ch.acanda.maven:code-analysis-maven-plugin 0.16.0 - edu.hm.hafner:analysis-model 10.17.0 -...

org.liquibase:liquibase-cdi (>=4.13.0, <=4.14.0), org.liquibase:liquibase-maven-plugin (4.13.0) potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.20)

net.snowflake:snowflake-jdbc MAVEN version 3.13.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.liquibase:liquibase-cdi =4.13.0, =4.14.0 - org.liquibase:liquibase-maven-plugin 4.13.0 Source cve...

com.snowflake:snowflake-maven-plugin (0.1.0), org.liquibase:liquibase-cdi (>=4.19.1, <=4.20.0) potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.27)

net.snowflake:snowflake-jdbc MAVEN version 3.13.27 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowflake-maven-plugin 0.1.0 - org.liquibase:liquibase-cdi =4.19.1, =4.20.0 Source cves...

org.keycloak:keycloak-crypto-fips1402 (25.0.3), org.keycloak:keycloak-dependencies-server-all (25.0.3) +12 more potentially affected by CVE-2026-2733 via org.keycloak:keycloak-services (25.0.3)

org.keycloak:keycloak-services MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-crypto-fips1402 25.0.3 - org.keycloak:keycloak-dependencies-server-all 25.0....

fr.cnieg.keycloak:attribute-login-provider (1.4.1), org.keycloak:keycloak-crypto-fips1402 (23.0.5) +13 more potentially affected by CVE-2026-2733 via org.keycloak:keycloak-services (23.0.5)

org.keycloak:keycloak-services MAVEN version 23.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.1 - org.keycloak:keycloak-crypto-fips1402 23.0.5 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.2), io.phasetwo.keycloak:keycloak-orgs (>=0.53, <=0.57) +24 more potentially affected by CVE-2026-2733 via org.keycloak:keycloak-services (23.0.6)

org.keycloak:keycloak-services MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.2 - io.phasetwo.keycloak:keycloak-orgs =0.53, =0.57...