br.com.anteros:anteros-spring-swagger (1.0.0), club.javafamily:javafamily-rest (>=0.1.0.release, <=0.1.1.release) +379 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.0.9.release)

org.springframework:spring-expression MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - br.com.anteros:anteros-spring-swagger 1.0.0 - club.javafamily:javafamily-rest...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cedarsoftware:json-command-servlet (>=1.0.0, <=1.1.2) +179 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.6.release)

org.springframework:spring-expression MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...

com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4) +62 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.7.release)

org.springframework:spring-expression MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.alibaba.citrus:citrus-springext-all =3.1.6, =3.1.6, =3.1.6, =0.10.0,...

ch.inftec.ju:ju-dbutil-test-legacy (4.1), ch.ralscha:extdirectspring (>=1.3.0, <=1.3.1) +171 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.1.release)

org.springframework:spring-expression MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.inftec.ju:ju-dbutil-test-legacy 4.1 - ch.ralscha:extdirectspring =1.3.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.0.0, <=3.4.0) +1617 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.10.release)

org.springframework:spring-expression MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 -...

at.molindo.social:spring-social-security (1.1.0.release), cc.fozone.validation:fo-validation (>=0.9.0.release, <=0.9.1.release) +489 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.8.release)

org.springframework:spring-expression MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo.social:spring-social-security 1.1.0.release -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +166 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.0.release)

org.springframework:spring-expression MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.2), cc.ecore:spring-jfinal-plus (>=0.1.1, <=0.1.2) +175 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.2.0.release)

org.springframework:spring-expression MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1, =0.4.0, =0.0.1, =0.0.1, =0.0.1,...

be.rufer.swisscom.sms:api-client (1.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (0.9) +233 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.1.3.release)

org.springframework:spring-expression MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - be.rufer.swisscom.sms:api-client 1.0 -...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), capital.scalable:spring-auto-restdocs-core (>=1.0.14, <=1.0.15) +367 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.15.release)

org.springframework:spring-expression MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ai.foremast.metrics:foremast-spring-4x-k8s-metrics =0.1.6, =1.0.14, =1.0.20,...

co.fingerprintsoft:notification-spring-boot-autoconfigure (1.0.10), co.fingerprintsoft:notification-spring-boot-starter (1.0.10) +320 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.2.8.release)

org.springframework:spring-expression MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.fingerprintsoft:notification-spring-boot-autoconfigure 1.0.10 -...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +1590 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.9.release)

org.springframework:spring-expression MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.1, =1.1, =1.1, =1.1, =1.1, =1.2, =1.1.1,...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +156 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.0.8.release)

org.springframework:spring-expression MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 -...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-apm (>=1.5.13, <=1.5.13.2) +852 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.17.release)

org.springframework:spring-expression MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-apm =1.5.13, =1.5.13, =1.5.13,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), cn.ymotel:largedatabtach (>=1.0.1, <=1.0.4) +630 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.20.release)

org.springframework:spring-expression MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter 0.1.8 -...

at.molindo:spring-data-custom (0.1.0), be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6) +1117 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.4.release)

org.springframework:spring-expression MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:spring-data-custom 0.1.0 - be.looorent:jflu-producer-springmvc =0....

at.molindo:molindo-notify (>=1.0.0-alpha-1, <=1.0.0-alpha-2), ca.grimoire.spring:spring-request-aware (1.0) +232 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (3.0.4.release)

org.springframework:spring-expression MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo:molindo-notify =1.0.0-alpha-1, =1.0.2, =1.1.1, =1.0.3, =1.0.1,...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +19158 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (>=6.2.0, <=6.2.18)

org.springframework:spring-expression MAVEN version =6.2.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =0.9.0 and more Source cves: CVE-2026-41850 Source advisory: OSV:GHSA-R5W3-XV2F-J59Q...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-core (1.1.4.release) +431 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.1.8.release)

org.springframework:spring-expression MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

at.porscheinformatik.zanata:zanata-spring (>=1.0.0.release, <=1.1.0.release), ca.appsimulations:jlqninterface (>=1.0.0, <=1.1.0) +1586 more potentially affected by CVE-2026-41850 via org.springframework:spring-expression (4.3.13.release)

org.springframework:spring-expression MAVEN version 4.3.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - at.porscheinformatik.zanata:zanata-spring =1.0.0.release, =1.0.0, =1.0.2,...