com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.3) +5 more potentially affected by CVE-2026-39304 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2026-39304 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-15992453...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.3) +5 more potentially affected by CVE-2026-40046 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.3)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.3 Source cves: CVE-2026-40046 Source advisory: OSV:GHSA-XVQC-PP94-FMPX...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.2) +5 more potentially affected by CVE-2026-34197 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.2)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.2 Source cves: CVE-2026-34197 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-16032379...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.1) +5 more potentially affected by CVE-2026-33227 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.1 Source cves: CVE-2026-33227 Source advisory: GHSA-H2H4-5M64-M273...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.2) +5 more potentially affected by CVE-2026-34197 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.2)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.2 Source cves: CVE-2026-34197 Source advisory: OSV:GHSA-RXPJ-7QVF-XV32...

fr.cnieg.keycloak:attribute-login-provider (1.3.8), io.phasetwo.keycloak:keycloak-extensions (0.1) +24 more potentially affected by CVE-2026-37977 via org.keycloak:keycloak-services (22.0.3)

org.keycloak:keycloak-services MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.8 - io.phasetwo.keycloak:keycloak-extensions 0.1 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-37977 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-4634 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-crypto-fips1402 (25.0.5) +13 more potentially affected by CVE-2026-4282 via org.keycloak:keycloak-services (25.0.5)

org.keycloak:keycloak-services MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.9), io.github.shahrear002:keycloak-universal-sms (>=1.0.0, <=1.0.1) +22 more potentially affected by CVE-2026-4634 via org.keycloak:keycloak-services (24.0.4)

org.keycloak:keycloak-services MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.9 - io.github.shahrear002:keycloak-universal-sms...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

io.phasetwo.keycloak:keycloak-events (0.29), org.keycloak:keycloak-dependencies-server-all (24.0.3) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (24.0.3)

org.keycloak:keycloak-model-jpa MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-events 0.29 - org.keycloak:keycloak-dependencies-server-all 24.0.3...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-guides (25.0.5) +5 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (25.0.5)

org.keycloak:keycloak-model-jpa MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 - org.keycloak:keycloak-guides 25.0.5 -...

org.keycloak:keycloak-dependencies-server-all (19.0.0), org.keycloak:keycloak-guides (19.0.0) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (19.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 19.0.0 - org.keycloak:keycloak-guides 19.0.0 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.2), io.phasetwo.keycloak:keycloak-orgs (>=0.53, <=0.57) +24 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (23.0.6)

org.keycloak:keycloak-services MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.2 - io.phasetwo.keycloak:keycloak-orgs =0.53, =0.57...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1190 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 -...

com.googlecode.apparat:apparat-maven-plugin (1.0.rc4), org.apache.maven:apache-maven (3.0-beta-1) +33 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.3)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.googlecode.apparat:apparat-maven-plugin 1.0.rc4 - org.apache.maven:apache-maven 3.0-beta-1 ...

au.net.causal.maven.native-security:natsec-maven-plugin (1.0), org.apache.maven.archiva:archiva-artifact-converter (>=1.0-alpha-1, <=1.0.2) +123 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.net.causal.maven.native-security:natsec-maven-plugin 1.0 -...

net.sf.mgp:maven-gwt-plugin (>=1.0, <=1.5.0), org.apache.portals.jetspeed-2:jetspeed-mvn-maven-plugin (>=2.2.0, <=2.3.1) potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5)

org.codehaus.plexus:plexus-utils MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - net.sf.mgp:maven-gwt-plugin =1.0, =2.2.0, =2.3.1 Source cves: CVE-2025-67030 Source advisory:...