ai.platon.pulsar:browser4-boot (>=4.13.5, <=4.14.0-rc.2), ai.platon.pulsar:browser4-captcha (>=4.13.5, <=4.14.0-rc.2) +6732 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-autoconfigure (>=4.0.0-m1, <=4.0.6)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.0.0-m1, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-40992 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-17304741...

cn.home1:oss-admin (>=1.0.6.oss, <=1.0.7.oss), cn.home1:oss-configlint (1.0.6.oss) +1234 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.4.1.release)

org.springframework.boot:spring-boot MAVEN version 1.4.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.home1:oss-admin =1.0.6.oss, =1.0.6.oss, =1.0.6.oss, =1.0.7.oss, =1.0.7.oss,...

ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0, <=0.3.0) +5498 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (>=4.0.0, <=4.0.5)

org.springframework.boot:spring-boot MAVEN version =4.0.0, =0.1.0, =0.1.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-2, =2.0.0 and more Source cves: CVE-2026-40973 Source advisory: OSV:GHSA-WWPQ-F5C3-7HVX...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), cn.bestwu:starter-logging (>=0.1.6-v1, <=1.0.0) +867 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.10.release)

org.springframework.boot:spring-boot MAVEN version 1.5.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =1.0.1,...

am.ik.home:uaa-server (>=1.3.0, <=1.8.1), br.jus.stf.digital:core (>=0.2.0, <=1.6.0) +320 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.1.release)

org.springframework.boot:spring-boot MAVEN version 1.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - am.ik.home:uaa-server =1.3.0, =0.2.0, =6.2.0.5, =6.2.0.6, =6.2.0.4, =6.2.0.5,...

cn.allbs:allbs-dynamic-db (>=1.0.0, <=1.1.5), cn.home1:logback-example (>=0.0.8.oss, <=0.1.1) +907 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.12.release)

org.springframework.boot:spring-boot MAVEN version 1.5.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.allbs:allbs-dynamic-db =1.0.0, =0.0.8.oss, =0.0.1, =0.0.1, =0.0.1, =0.0.1,...

com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3), com.erudika:para (>=1.3.0, <=1.7.0) +37 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.0.2.release)

org.springframework.boot:spring-boot MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.blitline:blitline-image-client-example =0.10.1, =1.3.0, =1.1.0.beta5,...

com.vilt-group.minium:minium-app (0.9.6), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +36 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.7.release)

org.springframework.boot:spring-boot MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.vilt-group.minium:minium-app 0.9.6 - de.codecentric:jbehave-admin-server...

ch.sbb.releasetrain:action (0.0.25), ch.sbb.releasetrain:config (0.0.25) +229 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.3.6.release)

org.springframework.boot:spring-boot MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ch.sbb.releasetrain:action 0.0.25 - ch.sbb.releasetrain:config 0.0.25 -...

am.ik.home:uaa-server (>=1.0.0, <=1.2.0), cn.chendahai:rocketmq-console-alarm (1.0.3) +335 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.4.3.release)

org.springframework.boot:spring-boot MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - am.ik.home:uaa-server =1.0.0, =1.0, =1.0.1, =3.0.1.3, =3.0.1.9, =3.0.1.9, =3.0....

ca.appsimulations:jlqninterface (>=1.0.0, <=1.1.0), ca.appsimulations:models (>=1.0.2, <=3.0.4) +1287 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.9.release)

org.springframework.boot:spring-boot MAVEN version 1.5.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - ca.appsimulations:jlqninterface =1.0.0, =1.0.2, =1.0.5, =0.0.1-release,...

at.researchstudio.sat:won-matcher (0.3), at.researchstudio.sat:won-owner-webapp (0.3) +799 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.3.release)

org.springframework.boot:spring-boot MAVEN version 1.5.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - at.researchstudio.sat:won-matcher 0.3 - at.researchstudio.sat:won-owner-webapp...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.28.0) +8589 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (>=3.3.0, <=3.3.13)

org.springframework.boot:spring-boot MAVEN version =3.3.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-40973 Source advisory: GHSA-WWPQ-F5C3-7HVX...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +146 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.3.8.release)

org.springframework.boot:spring-boot MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.28.0) +8589 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (>=3.3.0, <=3.3.13)

org.springframework.boot:spring-boot MAVEN version =3.3.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-40973 Source advisory: OSV:GHSA-WWPQ-F5C3-7HVX...

cc.ccoke:validate-spring-boot-starter (>=0.1, <=0.5), cc.zenfery:springboot-starter-mds (>=0.1.1, <=0.1.2) +209 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.4.4.release)

org.springframework.boot:spring-boot MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cc.ccoke:validate-spring-boot-starter =0.1, =0.1.1, =0.1.1, =1.23.0, =0.0.2,...

com.github.advantageous:qbit-spring (>=0.9.1-rc11, <=0.9.2-rc14), com.github.jmgilmour:parker-spring-boot (0.1.0) +165 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.2.6.release)

org.springframework.boot:spring-boot MAVEN version 1.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.advantageous:qbit-spring =0.9.1-rc11, =2.0.1, =2.2.29, =1.0.4, =1.0....

cn.skylarkai:license (>=1.0.0, <=1.0.2), com.eworkcloud:ework-cloud-starter-web (>=1.0.0, <=1.8.1) +175 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.5.20.release)

org.springframework.boot:spring-boot MAVEN version 1.5.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.skylarkai:license =1.0.0, =1.0.0, =3.1.1.release, =2.2.0.release,...

com.github.jlgrock.snp:client (0.1), com.github.jlgrock.snp:core (0.1) +78 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.2.0.release)

org.springframework.boot:spring-boot MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.jlgrock.snp:client 0.1 - com.github.jlgrock.snp:core 0.1 -...

cn.jiangzeyin.fast-boot:common-boot (>=1.1.12, <=1.2.39), cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39) +236 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.4.7.release)

org.springframework.boot:spring-boot MAVEN version 1.4.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.1.12, =1.0.3, =1.2.28, =1.1.2, =1.1.2,...