com.payneteasy.superfly:superfly-web (>=1.1-1, <=1.1-2), org.grails:grails-webflow (>=2.2.0.rc2, <=2.2.4) +9 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (2.5.6.sec01)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.1-1, =2.2.0.rc2, =2.0.2, =1.0.0.release,...

CLSA-2025-1760313987 TuxCare security update for org.springframework.webflow (2 CVEs)

TuxCare rebuilt 5 org.springframework.webflow packages to address 2 CVEs. Fixed in 2.3.1.RELEASE-tuxcare.1...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.webapp.modules:cloud-altemistafwk-webapp-jsf-conf (>=3.0.0.release, <=3.1.0.release) +733 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (>=2.0.6.release, <=2.5.1.release)

org.springframework.webflow:spring-webflow MAVEN version =2.0.6.release, =3.0.0.release, =3.0.0.release, =2.0.0, =2.3.0, =2.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.0.1, =5.1.3, =5.3.4 and more Source cves: CVE-2026-40986 Source advisory: OSV:GHSA-HW5C...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.webapp.modules:cloud-altemistafwk-webapp-jsf-conf (>=3.0.0.release, <=3.1.0.release) +733 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (>=2.0.6.release, <=2.5.1.release)

org.springframework.webflow:spring-webflow MAVEN version =2.0.6.release, =3.0.0.release, =3.0.0.release, =2.0.0, =2.3.0, =2.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.0.1, =5.1.3, =5.3.4 and more Source cves: CVE-2026-40986 Source advisory: GHSA-HW5C-XM3...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40986 Source advisory: GHSA-HW5C-XM3C-V96W...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40986 Source advisory: OSV:GHSA-HW5C-XM3C-V96W...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.webapp.modules:cloud-altemistafwk-webapp-jsf-conf (>=3.0.0.release, <=3.1.0.release) +733 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=2.0.6.release, <=2.5.1.release)

org.springframework.webflow:spring-webflow MAVEN version =2.0.6.release, =3.0.0.release, =3.0.0.release, =2.0.0, =2.3.0, =2.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.0.1, =5.1.3, =5.3.4 and more Source cves: CVE-2026-40985 Source advisory: GHSA-9GGW-87M...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40985 Source advisory: OSV:GHSA-9GGW-87M9-9GFC...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.webapp.modules:cloud-altemistafwk-webapp-jsf-conf (>=3.0.0.release, <=3.1.0.release) +733 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=2.0.6.release, <=2.5.1.release)

org.springframework.webflow:spring-webflow MAVEN version =2.0.6.release, =3.0.0.release, =3.0.0.release, =2.0.0, =2.3.0, =2.1.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.0.1, =5.1.3, =5.3.4 and more Source cves: CVE-2026-40985 Source advisory: OSV:GHSA-9GGW...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40985 Source advisory: GHSA-9GGW-87M9-9GFC...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40985 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWEBFLOW-17315634...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=4.0.0-rc1, <=4.0.0)

org.springframework.webflow:spring-webflow MAVEN version =4.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc5 and more Source cves: CVE-2026-40985...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40986 Source advisory: MEND:CVE-2026-40986...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

com.buession.cas:cas-server-support-captcha (4.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +449 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (>=3.0.0, <=3.0.1)

org.springframework.webflow:spring-webflow MAVEN version =3.0.0, =6.2.0, =4.0.0-m0, =4.1.3 and more Source cves: CVE-2026-40985 Source advisory: MEND:CVE-2026-40985...