ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ch.rasc:wamp2spring-security-servlet (4.0.0) +836 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=7.0.0, <=7.0.7)

org.springframework:spring-websocket MAVEN version =7.0.0, =4.13.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0, =1.21.9, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 - com.appjars:appjars-i18n-manager-flow 2.0.0 - com.codbex.atlas:codbex-atlas-application 2.110.0 and more Source cves: CVE-2026-41838 Source...

com.arcadeanalytics:arcadeanalytics (>=1.0.2, <=1.0.8), com.github.codefrogcc:allocation (>=1.0.0, <=1.1.4) +269 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.18.release)

org.springframework:spring-websocket MAVEN version 4.3.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.arcadeanalytics:arcadeanalytics =1.0.2, =1.0.0, =1.0.0, =5.3.1, =5.3.1,...

ch.rasc:wampspring (1.1.2), ch.rasc:wampspring-security (1.1.2) +277 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.13.release)

org.springframework:spring-websocket MAVEN version 4.3.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ch.rasc:wampspring 1.1.2 - ch.rasc:wampspring-security 1.1.2 -...

at.researchstudio.sat:won-owner (0.3), at.researchstudio.sat:won-owner-webapp (0.3) +180 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.8.release)

org.springframework:spring-websocket MAVEN version 4.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0....

org.apereo.cas:cas-server-core-api (>=5.3.7, <=5.3.16), org.apereo.cas:cas-server-core-api-authentication (>=5.3.7, <=5.3.16) +28 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.21.release)

org.springframework:spring-websocket MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.apereo.cas:cas-server-core-api =5.3.7, =5.3.7, =5.3.7, =5.3.7, =5.3.7,...

ch.rasc:wampspring (1.1.1), ch.rasc:wampspring-security (1.1.1) +18 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.1.6.release)

org.springframework:spring-websocket MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ch.rasc:wampspring 1.1.1 - ch.rasc:wampspring-security 1.1.1 -...

cn.shazhengbo:code-generator (>=1.0.0, <=1.0.1), com.themodernway:themodernway-server-core (>=1.2.4-release, <=1.2.11-release) +296 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.12.release)

org.springframework:spring-websocket MAVEN version 4.3.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - cn.shazhengbo:code-generator =1.0.0, =1.2.4-release, =1.2.4-release,...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ch.rasc:wamp2spring-security-servlet (4.0.0) +836 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=7.0.0, <=7.0.7)

org.springframework:spring-websocket MAVEN version =7.0.0, =4.13.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0, =1.21.9, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 - com.appjars:appjars-i18n-manager-flow 2.0.0 - com.codbex.atlas:codbex-atlas-application 2.110.0 and more Source cves: CVE-2026-41838 Source...

cn.zkdcloud:spring-springmvc-support (1.0), com.ahome-it:ahome-tooling-server-core (>=1.1.14-release, <=1.1.18-release) +142 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.3.release)

org.springframework:spring-websocket MAVEN version 4.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - cn.zkdcloud:spring-springmvc-support 1.0 - com.ahome-it:ahome-tooling-server-co...

ai.driftkit:driftkit-workflow-controllers (>=0.7.5, <=0.9.2), ai.driftkit:driftkit-workflow-engine-spring-boot-starter (>=0.7.0, <=0.9.2) +726 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=6.1.0, <=6.1.21)

org.springframework:spring-websocket MAVEN version =6.1.0, =0.7.5, =0.7.0, =0.5.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =1.0.31 and more Source cves: CVE-2026-41838 Source advisory: OSV:GHSA-Q723-847Q-5G8G...

cn.ocoop.framework:spring-in (>=1.0, <=1.0.3), com.17jee:e-basic-data (>=3.0.1.5, <=3.0.1.11) +31 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.5.release)

org.springframework:spring-websocket MAVEN version 4.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - cn.ocoop.framework:spring-in =1.0, =3.0.1.5, =1.1.27-release, =1.1.27-release,...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), br.com.m4rc310:br-com-m4rc310-graphql (1.0.1) +1872 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=5.0.0.release, <=5.3.39)

org.springframework:spring-websocket MAVEN version =5.0.0.release, =4.4.0.0, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.6.0, =3.1.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.10.5 and more Source cves: CVE-2026-41838 Source advisory: OSV:GHSA-Q723-847Q-5G8G...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ch.rasc:wamp2spring-security-servlet (4.0.0) +836 more potentially affected by CVE-2026-41839 via org.springframework:spring-websocket (>=7.0.0, <=7.0.7)

org.springframework:spring-websocket MAVEN version =7.0.0, =4.13.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0, =1.21.9, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 - com.appjars:appjars-i18n-manager-flow 2.0.0 - com.codbex.atlas:codbex-atlas-application 2.110.0 and more Source cves: CVE-2026-41839 Source...

at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21) +1095 more potentially affected by CVE-2026-41839 via org.springframework:spring-websocket (>=6.2.0, <=6.2.18)

org.springframework:spring-websocket MAVEN version =6.2.0, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41839 Source advisory: MEND:CVE-2026-41839...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ch.rasc:wamp2spring-security-servlet (4.0.0) +836 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=7.0.0, <=7.0.7)

org.springframework:spring-websocket MAVEN version =7.0.0, =4.13.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0, =1.21.9, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 - com.appjars:appjars-i18n-manager-flow 2.0.0 - com.codbex.atlas:codbex-atlas-application 2.110.0 and more Source cves: CVE-2026-41838 Source...

at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21) +1095 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=6.2.0, <=6.2.18)

org.springframework:spring-websocket MAVEN version =6.2.0, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41838 Source advisory: MEND:CVE-2026-41838...

ai.platon.pulsar:browser4-rest (>=4.13.5, <=4.14.0-rc.2), ch.rasc:wamp2spring-security-servlet (4.0.0) +836 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=7.0.0-m7, <=7.0.7)

org.springframework:spring-websocket MAVEN version =7.0.0-m7, =4.13.5, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0, =1.21.9, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 - com.appjars:appjars-i18n-manager-flow 2.0.0 - com.codbex.atlas:codbex-atlas-application 2.110.0 and more Source cves: CVE-2026-41838 Source...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), br.com.m4rc310:br-com-m4rc310-graphql (1.0.1) +1237 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=5.3.0, <=5.3.39)

org.springframework:spring-websocket MAVEN version =5.3.0, =4.4.0.2, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.2.0, =6.8.0, =6.4.0, =5.3.0, =6.10.5 and more Source cves: CVE-2026-41838 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254123...

ai.driftkit:driftkit-workflow-controllers (>=0.7.5, <=0.9.2), ai.driftkit:driftkit-workflow-engine-spring-boot-starter (>=0.7.0, <=0.9.2) +1377 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=6.1.0, <=6.2.18)

org.springframework:spring-websocket MAVEN version =6.1.0, =0.7.5, =0.7.0, =0.5.0, =0.0.1, =1.0.1, =1.0.1, =1.0.1, =2.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =2.1.0, =2.1.21 and more Source cves: CVE-2026-41838 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254123...

org.ops4j.pax.web.samples:war-vaadin08-spring (>=8.0.1, <=9.0.10) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.29.release)

org.springframework:spring-websocket MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.ops4j.pax.web.samples:war-vaadin08-spring =8.0.1, =9.0.10 Source cves:...