de.cezaryrk.olingo:odata-fit (5.0.1-renamed), no.ks.fiks:adresseregisteret-client (>=1.0.0-rc1, <=1.4.0) +16 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50631 Source advisory: GHSA-83R6-96M8-R52P...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), no.ks.fiks:adresseregisteret-client (>=1.0.0-rc1, <=1.4.0) +16 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50629 Source advisory: GHSA-F8P7-H97Q-7VX7...

org.apache.camel.component.linkedin:camel-linkedin (>=2.15.3, <=2.15.6), org.apache.camel.component.linkedin:camel-linkedin-api (>=2.15.3, <=2.15.6) +5 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.0.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.component.linkedin:camel-linkedin =2.15.3, =2.15.3, =2.15.6 -...

org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebapp (1.7.1), org.apache.cxf.fediz:fediz-idp (1.7.1) +8 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.6.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.cxf.fediz.systests.federation:fediz-systests-federation-oidcidpwebap...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), no.ks.fiks:adresseregisteret-client (>=1.0.0-rc1, <=1.4.0) +16 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50630 Source advisory: OSV:GHSA-XF62-WR5P-5P95...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), no.ks.fiks:adresseregisteret-client (>=1.0.0-rc1, <=1.4.0) +16 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50629 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339177...

org.apache.cxf.systests:cxf-systests-jaxrs (>=4.2.0, <=4.2.1), org.apache.cxf.systests:cxf-systests-transport-jms (>=4.2.0, <=4.2.1) +4 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (>=4.2.0, <=4.2.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50632 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339190...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), no.ks.fiks:adresseregisteret-client (>=1.0.0-rc1, <=1.4.0) +17 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (>=4.0.0, <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version =4.0.0, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50634 Source advisory:...

no.ks.fiks:adresseregisteret-client (>=1.5.0, <=1.7.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0, <=1.7.0) +13 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.1)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.1 Source cves: CVE-2026-50630 Source advisory: SNYK:JAVA-ORGAPACHECXF-17339182...

org.apache.cxf.systests:cxf-systests-transports (2.1.9), org.apache.cxf.systests:cxf-systests-uncategorized (2.1.9) +3 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.1.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports 2.1.9 -...

org.apache.camel:camel-example-cxf (2.9.3), org.apache.cxf.systests:cxf-systests-jaxrs (2.5.5) +6 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.5.5)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.9.3 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.cxf.systests:cxf-systests-transports (2.1.10), org.apache.cxf.systests:cxf-systests-uncategorized (2.1.10) +3 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.1.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports 2.1.10 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.6.12), org.apache.cxf.systests:cxf-systests-transport-jms (2.6.12) +6 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.6.12)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.6.12 -...

org.apache.cxf.dosgi:cxf-dosgi-ri-multibundle-distribution (>=1.4.0, <=1.5.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.2) +7 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.7.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.dosgi:cxf-dosgi-ri-multibundle-distribution =1.4.0, =1.5.0 -...

org.apache.camel:camel-example-cxf (>=2.11.4, <=2.13.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.10) +7 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (2.7.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.11.4, =2.13.0 -...

com.treelogic-swe:aws-mock (1.0), com.treelogic-swe:cxf-stub (>=ec2-2013-02-01, <=1.0) +53 more potentially affected by CVE-2026-44417 via org.apache.cxf:cxf-rt-transports-jms (>=2.0.6, <=3.6.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version =2.0.6, =ec2-2013-02-01, =1.4.0, =1.4.0, =3.0.0, =2.2.7, =2.4.0, =2.1.7, =2.1.7, =2.3.0, =2.0.6, =2.6.0, =2.0.6, =2.0.6, =3.2.0, =3.6.10 and more Source cves: CVE-2026-44417 Source advisory: MEND:CVE-2026-44417...

org.apache.camel:camel-example-cxf (>=2.9.1, <=2.9.2), org.apache.cxf.systests:cxf-systests-jaxrs (2.5.2) +6 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.5.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.9.1, =2.9.2 -...

org.apache.camel:camel-example-cxf (2.13.4), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.14) +7 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.7.14)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.13.4 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.cxf.dosgi:cxf-dosgi-ri-multibundle-distribution (>=1.4.0, <=1.5.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.2) +7 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.7.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.dosgi:cxf-dosgi-ri-multibundle-distribution =1.4.0, =1.5.0 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.4.7), org.apache.cxf.systests:cxf-systests-transport-jms (2.4.7) +5 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.4.7)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.4.7 -...