ai.mindconnect:mc-workflow-swing-ui (>=0.0.2, <=0.8.4), ba.sake:hepek-components_2.12 (>=0.7.0, <=0.8.0) +329 more potentially affected by CVE-2026-0858 via net.sourceforge.plantuml:plantuml (>=1.2017.12, <=1.2025.10)

net.sourceforge.plantuml:plantuml MAVEN version =1.2017.12, =0.0.2, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.0.2, =0.0.1, =0.0.59, =0.0.46, =0.0.46, =0.0.55 and more Source cves: CVE-2026-0858 Source advisory: OSV:GHSA-HRVF-G648-RF3M...

ai.mindconnect:mc-workflow-swing-ui (>=0.0.2, <=0.8.4), ba.sake:hepek-components_2.12 (>=0.7.0, <=0.8.0) +329 more potentially affected by CVE-2026-0858 via net.sourceforge.plantuml:plantuml (>=1.2017.12, <=1.2025.10)

net.sourceforge.plantuml:plantuml MAVEN version =1.2017.12, =0.0.2, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.0.2, =0.0.1, =0.0.59, =0.0.46, =0.0.46, =0.0.55 and more Source cves: CVE-2026-0858 Source advisory: SNYK:JAVA-NETSOURCEFORGEPLANTUML-14552230...

Server Side Request Forgery (SSRF)

net.sourceforge.plantuml: is vulnerable to Server Side Request Forgery SSRF. The vulnerability exists because the URL restrictions imposed by the different security profiles could be bypassed which allows an attacker to access the internal servers and resources to perform unauthorized actions...

ba.sake:hepek-components_2.12 (>=0.7.0, <=0.8.0), ba.sake:hepek-components_2.13 (>=0.7.0, <=0.9.0) +270 more potentially affected by CVE-2023-3432 via net.sourceforge.plantuml:plantuml (>=1.2017.12, <=1.2023.8)

net.sourceforge.plantuml:plantuml MAVEN version =1.2017.12, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.0.2, =0.0.1, =0.0.46, =0.0.46, =1.4.0, =2.0.0-m3, =2.0.0-m4 and more Source cves: CVE-2023-3432 Source advisory: OSV:GHSA-FF3M-68VJ-H86P...