ch.hsr.mas.oms-financialanalyzer:indicators (1.2.0), ch.hsr.mas.oms-financialanalyzer:oms-api (1.2.0) +456 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.1.1.release)

org.springframework:spring-expression MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.hsr.mas.oms-financialanalyzer:indicators 1.2.0 -...

ch.rasc:sse-eventbus (1.1.9), com.atlassian.oai:swagger-request-validator-examples (>=2.9.1, <=2.13.0) +479 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.26.release)

org.springframework:spring-expression MAVEN version 4.3.26.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.rasc:sse-eventbus 1.1.9 -...

at.molindo:molindo-notify (>=1.0.0-alpha-3, <=2.0.0), com.blitline:blitline-image-client-example (>=0.10.1, <=0.13.3) +86 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.0.4.release)

org.springframework:spring-expression MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:molindo-notify =1.0.0-alpha-3, =0.10.1, =0.10.1, =1.0.0, =1.0.0,...

au.com.dius.pact.provider:spring (>=4.1.0, <=4.1.6), au.com.dius:pact-jvm-provider-spring (>=4.0.0-beta.1, <=4.0.10) +663 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.19.release)

org.springframework:spring-expression MAVEN version 4.3.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - au.com.dius.pact.provider:spring =4.1.0, =4.0.0-beta.1, =3.6.0-rc.1, =0.0.1,...

com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20) +129 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.29.release)

org.springframework:spring-expression MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate...

cn.weforward:weforward-data-mysql (>=1.1.0, <=1.2.17), com.alibaba.otter:canal.client (>=1.0.25, <=1.1.0) +345 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.9.release)

org.springframework:spring-expression MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.weforward:weforward-data-mysql =1.1.0, =1.0.25, =1.0.25, =1.0.25, =1.0.25,...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +8708 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (>=7.0.0, <=7.0.7)

org.springframework:spring-expression MAVEN version =7.0.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2026-41850 Source advisory: OSV:GHSA-R5W3-XV2F-J59Q...

br.com.thiagomoreira.replicon:replicon4j (>=0.1, <=1.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.6) +469 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.0.6.release)

org.springframework:spring-expression MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.thiagomoreira.replicon:replicon4j =0.1, =3.0.3, =3.0.3, =3.0.3, =3.0.5...

br.com.neppo.jlibs:jira-client (1.0), cn.chenzw.swagger:swagger-ext-all (1.0.1) +486 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.24.release)

org.springframework:spring-expression MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.neppo.jlibs:jira-client 1.0 - cn.chenzw.swagger:swagger-ext-all 1.0.1...

be.jacobsvanroy:spring-sql-unit (>=0.7, <=0.8), br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2) +96 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.0.0.release)

org.springframework:spring-expression MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.jacobsvanroy:spring-sql-unit =0.7, =1.2.1, =1.2.10, =1.0.0, =1.0-27,...

ch.ralscha:extdirectspring (1.5.0), cn.enilu:flash-core (1.0) +136 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.1.2.release)

org.springframework:spring-expression MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.ralscha:extdirectspring 1.5.0 - cn.enilu:flash-core 1.0 -...

cn.smilevers:xxljob-spring-boot-starter (1.8.2-release), com.alibaba.csb.sdk:java (1.1.5.11) +153 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.18.release)

org.springframework:spring-expression MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.smilevers:xxljob-spring-boot-starter 1.8.2-release -...

ca.islandora.indexing:islandora-indexing-triplestore (>=0.0.1, <=0.0.2), com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0) +316 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.11.release)

org.springframework:spring-expression MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.islandora.indexing:islandora-indexing-triplestore =0.0.1, =1.0.0-rc1,...

com.att.nsa:msgrtr (0.0.5), com.comcast.magic-wand:appium (>=4.0.1, <=4.0.3) +101 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.14.release)

org.springframework:spring-expression MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.att.nsa:msgrtr 0.0.5 - com.comcast.magic-wand:appium =4.0.1, =1.0.8,...

cn.easyproject:easycommondao-hibernate3 (>=1.1.0-release, <=1.4.0-release), cn.easyproject:easycommondao-hibernate4 (>=1.1.0-release, <=1.4.0-release) +1995 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.3.release)

org.springframework:spring-expression MAVEN version 4.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.easyproject:easycommondao-hibernate3 =1.1.0-release, =1.1.0-release,...

at.molindo:molindo-notify (2.1.0), ch.powerunit.extensions:powerunit-extensions-spring (0.0.1) +637 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.1.7.release)

org.springframework:spring-expression MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:molindo-notify 2.1.0 -...

ca.islandora.alpaca:islandora-connector-broadcast (>=0.2.0, <=0.3.0), ca.islandora.alpaca:islandora-indexing-triplestore (0.1.0) +545 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.1.9.release)

org.springframework:spring-expression MAVEN version 4.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.islandora.alpaca:islandora-connector-broadcast =0.2.0, =1.0.0, =2.0.0-rc2,...

com.dtflys.forest:forest-spring (1.0.0), com.garethahealy.amq6-dual-jaas-plugin:amq6-dual-jaas-plugin-parent (>=1.2.0-beta2, <=1.4.0) +557 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.16.release)

org.springframework:spring-expression MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.dtflys.forest:forest-spring 1.0.0 -...

cn.jairdavis:jair-common-utils (1.0.4), com.allenru:cross-origin (1.0.1) +171 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.0.2.release)

org.springframework:spring-expression MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cn.jairdavis:jair-common-utils 1.0.4 - com.allenru:cross-origin 1.0.1 -...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +1188 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.2.5.release)

org.springframework:spring-expression MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...