com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.7, <=2.0.3), com.github.wu191287278:spring-boot-starter-dubbo (>=1.5.3, <=1.5.33) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.7.7)

com.hazelcast:hazelcast MAVEN version 3.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.7, =1.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.3, <=1.0.4), com.hazelcast:hazelcast-build-utils (3.6.7) +11 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.6.7)

com.hazelcast:hazelcast MAVEN version 3.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.3, =1.4.5, =1.4.6 Source cves:...

ch.mobi.mobitor:mobitor-base (>=3.1.13, <=3.1.97), ch.mobi.mobitor:mobitor-doc (3.1.13) +39 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.11.2)

com.hazelcast:hazelcast MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.13, =2.1.6, =1.1.4, =2.1.4, =2.0.9.0, =0.1.0, =0.1.1 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.7, <=2.0.3), com.github.wu191287278:spring-boot-starter-dubbo (>=1.5.3, <=1.5.33) +8 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.7.7)

com.hazelcast:hazelcast MAVEN version 3.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.7, =1.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...

ch.mobi.mobitor:mobitor-base (>=3.1.13, <=3.1.97), ch.mobi.mobitor:mobitor-doc (3.1.13) +39 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.11.2)

com.hazelcast:hazelcast MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.13, =2.1.6, =1.1.4, =2.1.4, =2.0.9.0, =0.1.0, =0.1.1 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.10, <=2.0.5), com.gitee.zhan5:starter (1.0.1) +35 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.7.8)

com.hazelcast:hazelcast MAVEN version 3.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.10, =2.0.5 - com.gitee.zhan5:starter 1.0.1...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (2.1.10), com.gitee.kamismile:api (>=0.0.3, <=0.0.9) +44 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.12.11)

com.hazelcast:hazelcast MAVEN version 3.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter 2.1.10 - com.gitee.kamismile:api =0.0.3,...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +15 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.8.3)

com.rabbitmq:amqp-client MAVEN version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1, =1.11.0, =1.3.7-2, =1.19.1,...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2221 more potentially affected by CVE-2026-94651 via org.apache.thrift:libthrift (>=0.14.0, <=0.24.0)

org.apache.thrift:libthrift MAVEN version =0.14.0, =0.0.1, =0.0.1, =0.0.1, =3.10.0.5, =6.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =5.0.1, =1.2.0, =1.2.0, =2.0.0 - be.ugent.solidlab:shapeshift 0.0.1 and more Source cves: CVE-2026-94651 Source advisory: MEND:CVE-2026-94651...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0) potentially affected by CVE-2026-101908 via org.webjars.npm:axios (1.7.2)

org.webjars.npm:axios MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:axios and may be impacted: - com.github.linyuzai:concept-plugin-spring-boot-starter =2.0.0, =3.0.0 Source cves: CVE-2026-101908 Source advisory:...

Improper Authorization

LogNet grpc-spring-boot-starter is vulnerable to improper authorization. The vulnerability is due to improper authorization in the Annotation Processing component, which allows an attacker to remotely bypass authorization controls and gain unauthorized access by exploiting the vulnerable...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.2.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.2.0, <=5.2.1) +38 more potentially affected by CVE-2026-81875 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.2.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0,...

io.github.knowstack:kf-job-spring-boot-starter (>=1.0.0, <=2.0.2), io.github.knowstack:kf-security-test (1.0.0) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.github.knowstack:kf-job-spring-boot-starter =1.0.0, =1.0.26, =1.24.0, =1.24.0, =1.25...

org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security (2.2.0), org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security-4 (2.2.0) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.7.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security 2.2.0 -...

pl.allegro.tech.boot:handlebars-spring-boot-starter (0.2.5) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.3.0)

com.github.jknack:handlebars-springmvc MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter 0.2.5 Source cves: CVE-2026-634...

pl.allegro.tech.boot:handlebars-spring-boot-starter (0.2.7) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.3.2)

com.github.jknack:handlebars-springmvc MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter 0.2.7 Source cves: CVE-2026-634...

pl.allegro.tech.boot:handlebars-spring-boot-starter (0.2.2) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.2.0)

com.github.jknack:handlebars-springmvc MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter 0.2.2 Source cves: CVE-2026-634...

pl.allegro.tech.boot:handlebars-spring-boot-starter (>=0.2.0, <=0.2.1), pl.allegro.tech.boot:spring-boot-starter-handlebars (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.0.0)

com.github.jknack:handlebars-springmvc MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter =0.2.0, =0.1.0, =0.1.1 Source...

pl.allegro.tech.boot:handlebars-spring-boot-starter (>=0.2.3, <=0.2.4) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.2.3)

com.github.jknack:handlebars-springmvc MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter =0.2.3, =0.2.4 Source cves:...

pl.allegro.tech.boot:handlebars-spring-boot-starter (0.2.6) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.3.1)

com.github.jknack:handlebars-springmvc MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter 0.2.6 Source cves: CVE-2026-634...