com.ahome-it:ahome-tooling-server-core (>=1.0.110-release, <=1.0.120-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.111-release, <=1.0.120-release) +10 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.1.release)

org.springframework:spring-websocket MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.0.110-release, =1.0.111-release,...

com.caucho:spring4-websocket (>=4.0.62, <=4.0.63), net.apexes.wsonrpc:wsonrpc-server-support (>=2.2.0, <=2.8.0) +3 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.25.release)

org.springframework:spring-websocket MAVEN version 4.3.25.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.caucho:spring4-websocket =4.0.62, =2.2.0, =2.8.0 -...

org.springframework.integration:spring-integration-websocket (4.3.22.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.26.release)

org.springframework:spring-websocket MAVEN version 4.3.26.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.integration:spring-integration-websocket 4.3.22.release...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.5) +10 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.5.release)

org.springframework:spring-websocket MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.5 -...

org.lightadmin:light-logging-configurer (1.0.0.rc1) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.1.0.release)

org.springframework:spring-websocket MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.lightadmin:light-logging-configurer 1.0.0.rc1 Source cves: CVE-2025-41254...

com.almis.awe:awe-boot (>=4.0.4, <=4.0.5), com.almis.awe:awe-controller (>=4.0.3, <=4.1.1) +20 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.14.release)

org.springframework:spring-websocket MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.almis.awe:awe-boot =4.0.4, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3,...

org.springframework.boot:spring-boot-starter-websocket (>=1.1.9.release, <=1.1.10.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.0.8.release)

org.springframework:spring-websocket MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.9.release,...

com.consol.citrus:citrus-websocket (>=2.6.1, <=2.6.2), org.kurento:kurento-jsonrpc-server (6.6.0) +5 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.7.release)

org.springframework:spring-websocket MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.consol.citrus:citrus-websocket =2.6.1, =1.3.6.release, =4.2.9.release,...

io.antmedia.webrtc:streamapp (>=2.2.0, <=2.4.2.1), org.springframework.integration:spring-integration-websocket (4.3.23.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.28.release)

org.springframework:spring-websocket MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - io.antmedia.webrtc:streamapp =2.2.0, =2.4.2.1 -...

br.com.m4rc310:br-com-m4rc310-gql (1.0.58), br.com.m4rc310:br-com-m4rc310-gtim (1.0.58) +314 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=6.0.0, <=6.0.21)

org.springframework:spring-websocket MAVEN version =6.0.0, =3.0.1.0, =3.0.1.0, =1.0.9, =2.0.22, =1.1.5, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.8.5 and more Source cves: CVE-2025-41254 Source advisory: OSV:GHSA-7FCH-4F2F-JCGM...

org.springframework.boot:spring-boot-starter-websocket (1.3.8.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.8.release)

org.springframework:spring-websocket MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.3.8.release Source cve...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), br.com.m4rc310:br-com-m4rc310-graphql (1.0.1) +1872 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (>=5.0.0.release, <=5.3.39)

org.springframework:spring-websocket MAVEN version =5.0.0.release, =4.4.0.0, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.6.0, =3.1.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.10.5 and more Source cves: CVE-2025-41254 Source advisory: OSV:GHSA-7FCH-4F2F-JCGM...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +6 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.0.release)

org.springframework:spring-websocket MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.3), com.ahome-it:ahome-tooling-server-core (>=1.1.32-release, <=1.1.36-release) +38 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.6.release)

org.springframework:spring-websocket MAVEN version 4.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 2.3 -...

com.35liuqi:summer-web-framework (1.0), com.consol.citrus:citrus-websocket (2.7.2) +200 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.9.release)

org.springframework:spring-websocket MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.35liuqi:summer-web-framework 1.0 - com.consol.citrus:citrus-websocket 2.7.2...

org.springframework.integration:spring-integration-websocket (4.2.13.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.9.release)

org.springframework:spring-websocket MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.integration:spring-integration-websocket 4.2.13.release...

org.ops4j.pax.web.samples:war-vaadin08-spring (>=9.0.11, <=10.1.1), org.springframework.integration:spring-integration-websocket (4.3.24.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.30.release)

org.springframework:spring-websocket MAVEN version 4.3.30.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.ops4j.pax.web.samples:war-vaadin08-spring =9.0.11, =1.2.7, =1.3.11 Source...

com.kurento.kmf:kmf-broker (4.3.0), com.kurento.kmf:kmf-content-api (>=4.1.0, <=4.3.0) +6 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.0.1.release)

org.springframework:spring-websocket MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.kurento.kmf:kmf-broker 4.3.0 - com.kurento.kmf:kmf-content-api =4.1.0,...

com.ahome-it:ahome-tooling-server-core (1.0.109-release), com.ahome-it:ahome-tooling-server-hazelcast (1.0.109-release) +8 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.0.release)

org.springframework:spring-websocket MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.0.109-release -...

com.ahome-it:ahome-tooling-server-core (>=1.1.19-release, <=1.1.26-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.23-release, <=1.1.25-release) +114 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.4.release)

org.springframework:spring-websocket MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.19-release, =1.1.23-release,...