de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-68079 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-68079 Source advisory: SNYK:JAVA-ORGAPACHECXF-19341998...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-68481 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-68481 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342003...

no.ks.fiks:adresseregisteret-client (>=1.5.0, <=1.7.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0, <=1.7.0) +13 more potentially affected by CVE-2026-57818 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-57818 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342222...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-63687 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-63687 Source advisory: SNYK:JAVA-ORGAPACHECXF-19341995...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-65583 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-65583 Source advisory: MEND:CVE-2026-65583...

org.apache.cxf.systests:cxf-systests-jaxrs (2.3.10), org.apache.cxf.systests:cxf-systests-transports (2.3.10) +4 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.3.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.3.10 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.5.3), org.apache.cxf.systests:cxf-systests-transport-jms (2.5.3) +5 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.5.3)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.5.3 -...

org.apache.camel:camel-example-cxf (>=2.9.6, <=2.9.8), org.apache.cxf.systests:cxf-systests-jaxrs (2.5.9) +6 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.5.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.9.6, =2.9.8 -...

org.apache.camel:camel-example-cxf (>=2.11.2, <=2.12.1), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.6) +7 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.7.6)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.11.2, =2.12.1 -...

org.apache.camel:camel-example-cxf (2.12.2), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.7) +7 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.7.7)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.12.2 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.camel:camel-example-cxf (2.10.7), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.9) +9 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.6.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.10.7 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.cxf.systests:cxf-systests-jaxrs (2.3.4), org.apache.cxf.systests:cxf-systests-transports (2.3.4) +4 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.3.4)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.3.4 -...

org.apache.camel:camel-example-cxf (2.10.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.1) +7 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.6.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.10.0 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.camel:camel-example-cxf (2.9.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.5.1) +6 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.5.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.9.0 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.cxf.systests:cxf-systests-jaxrs (2.4.9), org.apache.cxf.systests:cxf-systests-transport-jms (2.4.9) +5 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.4.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.4.9 -...

de.grundid.osmtools:osm-tools-api (>=1.0.m1, <=1.0.m3), de.grundid.osmtools:osm-tools-process (>=1.0.m1, <=1.0.m3) +3 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.6.0)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - de.grundid.osmtools:osm-tools-api =1.0.m1, =1.0.m1, =1.0.m2, =1.0.m3 -...

com.github.cchacin:cucumber-common-steps (>=0.0.2, <=0.1.8), com.github.httpmock:mock-http-server-junit (>=1.0.0, <=1.1.5) +9 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.6.14)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.6.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - com.github.cchacin:cucumber-common-steps =0.0.2, =1.0.0, =1.0.0, =4.6.0.2,...

org.apache.cxf.systests:cxf-systests-rs-security (2.7.12), org.apache.cxf:apache-cxf (2.7.12) +2 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.7.12)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.cxf.systests:cxf-systests-rs-security 2.7.12 -...

org.apache.camel.maven:camel-servicenow-maven-plugin (3.11.7), org.apache.camel.springboot:camel-servicenow-starter (3.11.7) +7 more potentially affected by CVE-2026-50628 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.4.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin 3.11.7 -...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), no.ks.fiks:adresseregisteret-client (>=1.0.0-rc1, <=1.4.0) +16 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50631 Source advisory: GHSA-83R6-96M8-R52P...