org.http4k:http4k-aws (3.112.0), org.http4k:http4k-client-apache (3.112.0) +28 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.112.0)

org.http4k:http4k-core MAVEN version 3.112.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.112.0 - org.http4k:http4k-client-apache 3.112.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.114.0), org.http4k:http4k-client-apache (3.114.0) +28 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.114.0)

org.http4k:http4k-core MAVEN version 3.114.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.114.0 - org.http4k:http4k-client-apache 3.114.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.94.0), org.http4k:http4k-client-apache (3.94.0) +26 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.94.0)

org.http4k:http4k-core MAVEN version 3.94.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.94.0 - org.http4k:http4k-client-apache 3.94.0 - org.http4k:http4k-client-apache-async 3.94...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-12816 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519173...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-12860 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-12860 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518024...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-58061 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-58061 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519137...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-58063 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-58063 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519081...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-14682 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-14682 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518097...

com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-59651 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)

org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-59651 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512579...

org.http4k:http4k-client-apache (1.14.0), org.http4k:http4k-client-okhttp (1.14.0) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.14.0)

org.http4k:http4k-core MAVEN version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.14.0 - org.http4k:http4k-client-okhttp 1.14.0 - org.http4k:http4k-contract 1.14....

org.http4k:http4k-client-apache (1.17.0), org.http4k:http4k-client-okhttp (1.17.0) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.17.0)

org.http4k:http4k-core MAVEN version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.17.0 - org.http4k:http4k-client-okhttp 1.17.0 - org.http4k:http4k-contract 1.17....

org.http4k:http4k-client-apache (1.18.0), org.http4k:http4k-client-okhttp (1.18.0) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.18.0)

org.http4k:http4k-core MAVEN version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.18.0 - org.http4k:http4k-client-okhttp 1.18.0 - org.http4k:http4k-contract 1.18....

org.http4k:http4k-client-apache (1.19.0), org.http4k:http4k-client-okhttp (1.19.0) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.19.0)

org.http4k:http4k-core MAVEN version 1.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.19.0 - org.http4k:http4k-client-okhttp 1.19.0 - org.http4k:http4k-contract 1.19....

org.http4k:http4k-client-apache (1.19.1), org.http4k:http4k-client-okhttp (1.19.1) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.19.1)

org.http4k:http4k-core MAVEN version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.19.1 - org.http4k:http4k-client-okhttp 1.19.1 - org.http4k:http4k-contract 1.19....

org.http4k:http4k-client-apache (1.20.0), org.http4k:http4k-client-okhttp (1.20.0) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.20.0)

org.http4k:http4k-core MAVEN version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.20.0 - org.http4k:http4k-client-okhttp 1.20.0 - org.http4k:http4k-contract 1.20....

org.http4k:http4k-client-apache (1.21.0), org.http4k:http4k-client-okhttp (1.21.0) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.21.0)

org.http4k:http4k-core MAVEN version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.21.0 - org.http4k:http4k-client-okhttp 1.21.0 - org.http4k:http4k-contract 1.21....

org.http4k:http4k-client-apache (1.21.1), org.http4k:http4k-client-okhttp (1.21.1) +7 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.21.1)

org.http4k:http4k-core MAVEN version 1.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.21.1 - org.http4k:http4k-client-okhttp 1.21.1 - org.http4k:http4k-contract 1.21....

org.http4k:http4k-client-apache (1.23.0), org.http4k:http4k-client-okhttp (1.23.0) +8 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.23.0)

org.http4k:http4k-core MAVEN version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.23.0 - org.http4k:http4k-client-okhttp 1.23.0 - org.http4k:http4k-contract 1.23....

org.http4k:http4k-client-apache (1.25.0), org.http4k:http4k-client-okhttp (1.25.0) +8 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.25.0)

org.http4k:http4k-core MAVEN version 1.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.25.0 - org.http4k:http4k-client-okhttp 1.25.0 - org.http4k:http4k-contract 1.25....

org.http4k:http4k-client-apache (1.26.2), org.http4k:http4k-client-okhttp (1.26.2) +8 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.26.2)

org.http4k:http4k-core MAVEN version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.26.2 - org.http4k:http4k-client-okhttp 1.26.2 - org.http4k:http4k-contract 1.26....