com.github.cchacin:cucumber-common-steps (>=0.0.2, <=0.1.8), com.github.httpmock:mock-http-server-junit (>=1.0.0, <=1.1.5) +110 more potentially affected by CVE-2026-73179 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=2.6.0, <=3.6.12)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =2.6.0, =0.0.2, =1.0.0, =1.0.0, =ec2-2013-02-01, =1.7.2.230613, =1.7.2.230622, =1.0.m1, =1.0.m1, =1.0.m2, =1.1.9, =1.1.9, =2.0.0.final, =2.2.1.final and more Source cves: CVE-2026-73179 Source advisory: MEND:CVE-2026-73179...

de.cezaryrk.olingo:odata-fit (5.1.0), io.tesseraql:tesseraql-cli (>=0.15.0, <=0.19.1) +20 more potentially affected by CVE-2026-73179 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.22.1 and more Source cves: CVE-2026-73179 Source advisory: MEND:CVE-2026-73179...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-61466 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-61466 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342250...

no.ks.fiks:adresseregisteret-client (>=1.5.0, <=1.7.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0, <=1.7.0) +13 more potentially affected by CVE-2026-61466 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-61466 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342250...

com.github.malkomich:oauth2-token-client (0.0.1), com.liferay:org.apache.cxf.rt.rs.security.oauth2 (3.2.14.liferay-patched-1) +96 more potentially affected by CVE-2026-61466 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=3.0.0-milestone1, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =3.0.0-milestone1, =1.7.2.230613, =1.7.2.230622, =1.1.9, =1.1.9, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.14.0, =2.14.0, =0.1.0, =2.20.0, =1.0.0-m6, =2.16.0 and more Source cves: CVE-2026-61466 Source advisory:...

com.github.malkomich:oauth2-token-client (0.0.1), com.liferay:org.apache.cxf.rt.rs.security.oauth2 (3.2.14.liferay-patched-1) +96 more potentially affected by CVE-2026-68079 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=3.0.0-milestone1, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =3.0.0-milestone1, =1.7.2.230613, =1.7.2.230622, =1.1.9, =1.1.9, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.14.0, =2.14.0, =0.1.0, =2.20.0, =1.0.0-m6, =2.16.0 and more Source cves: CVE-2026-68079 Source advisory:...

no.ks.fiks:adresseregisteret-client (>=1.5.0, <=1.7.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0, <=1.7.0) +13 more potentially affected by CVE-2026-68079 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-68079 Source advisory: SNYK:JAVA-ORGAPACHECXF-19341998...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-68079 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-68079 Source advisory: SNYK:JAVA-ORGAPACHECXF-19341998...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-68481 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-68481 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342003...

com.github.malkomich:oauth2-token-client (0.0.1), com.liferay:org.apache.cxf.rt.rs.security.oauth2 (3.2.14.liferay-patched-1) +96 more potentially affected by CVE-2026-68481 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=3.0.0-milestone1, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =3.0.0-milestone1, =1.7.2.230613, =1.7.2.230622, =1.1.9, =1.1.9, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.14.0, =2.14.0, =0.1.0, =2.20.0, =1.0.0-m6, =2.16.0 and more Source cves: CVE-2026-68481 Source advisory:...

no.ks.fiks:adresseregisteret-client (>=1.5.0, <=1.7.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0, <=1.7.0) +13 more potentially affected by CVE-2026-68481 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-68481 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342003...

no.ks.fiks:adresseregisteret-client (>=1.5.0, <=1.7.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0, <=1.7.0) +13 more potentially affected by CVE-2026-57818 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-57818 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342222...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-57818 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-57818 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342222...

com.github.malkomich:oauth2-token-client (0.0.1), com.liferay:org.apache.cxf.rt.rs.security.oauth2 (3.2.14.liferay-patched-1) +96 more potentially affected by CVE-2026-57818 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=3.0.0-milestone1, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =3.0.0-milestone1, =1.7.2.230613, =1.7.2.230622, =1.1.9, =1.1.9, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.14.0, =2.14.0, =0.1.0, =2.20.0, =1.0.0-m6, =2.16.0 and more Source cves: CVE-2026-57818 Source advisory:...

no.ks.fiks:adresseregisteret-client (>=1.5.0, <=1.7.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0, <=1.7.0) +13 more potentially affected by CVE-2026-63687 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-63687 Source advisory: SNYK:JAVA-ORGAPACHECXF-19341995...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-63687 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.7 and more Source cves: CVE-2026-63687 Source advisory: SNYK:JAVA-ORGAPACHECXF-19341995...

com.github.malkomich:oauth2-token-client (0.0.1), com.liferay:org.apache.cxf.rt.rs.security.oauth2 (3.2.14.liferay-patched-1) +96 more potentially affected by CVE-2026-63687 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=3.0.0-milestone1, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =3.0.0-milestone1, =1.7.2.230613, =1.7.2.230622, =1.1.9, =1.1.9, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.14.0, =2.14.0, =0.1.0, =2.20.0, =1.0.0-m6, =2.16.0 and more Source cves: CVE-2026-63687 Source advisory:...

com.github.cchacin:cucumber-common-steps (>=0.0.2, <=0.1.8), com.github.httpmock:mock-http-server-junit (>=1.0.0, <=1.1.5) +110 more potentially affected by CVE-2026-57818 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=2.6.0, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =2.6.0, =0.0.2, =1.0.0, =1.0.0, =ec2-2013-02-01, =1.7.2.230613, =1.7.2.230622, =1.0.m1, =1.0.m1, =1.0.m2, =1.1.9, =1.1.9, =2.0.0.final, =2.2.1.final and more Source cves: CVE-2026-57818 Source advisory: MEND:CVE-2026-57818...

no.ks.fiks:adresseregisteret-client (>=1.5.0, <=1.7.0), no.ks.fiks:fastlegeregisteret-client (>=1.5.0, <=1.7.0) +13 more potentially affected by CVE-2026-61466 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.2.0, =1.5.0, =1.5.0, =1.5.0, =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-61466 Source advisory: MEND:CVE-2026-61466...

com.github.cchacin:cucumber-common-steps (>=0.0.2, <=0.1.8), com.github.httpmock:mock-http-server-junit (>=1.0.0, <=1.1.5) +110 more potentially affected by CVE-2026-61466 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=2.6.0, <=3.6.11)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =2.6.0, =0.0.2, =1.0.0, =1.0.0, =ec2-2013-02-01, =1.7.2.230613, =1.7.2.230622, =1.0.m1, =1.0.m1, =1.0.m2, =1.1.9, =1.1.9, =2.0.0.final, =2.2.1.final and more Source cves: CVE-2026-61466 Source advisory: MEND:CVE-2026-61466...