be.personify.iam:personify-frontend (>=1.5.1.release, <=1.5.8.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (>=4.0.0-m1, <=5.0.0) +368 more potentially affected by CVE-2026-76984 via org.apache.wicket:wicket-core (>=10.0.0-m1, <=10.10.0)

org.apache.wicket:wicket-core MAVEN version =10.0.0-m1, =1.5.1.release, =4.0.0-m1, =4.0.0-m1, =5.0.0 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 10.0.0-m1 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar 10.0.0-m1 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui-core 10.0.0-m1...

be.personify.iam:personify-frontend (>=1.3.1.release, <=1.4.2.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=3.0.1-rc, <=3.1.7) +177 more potentially affected by CVE-2026-75802 via org.apache.wicket:wicket-extensions (>=9.0.0-m1, <=9.23.0)

org.apache.wicket:wicket-extensions MAVEN version =9.0.0-m1, =1.3.1.release, =3.0.1-rc, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m3, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.23.1...

be.personify.iam:personify-frontend (>=1.3.1.release, <=1.4.2.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=3.0.4, <=3.1.7) +176 more potentially affected by CVE-2026-76985 via org.apache.wicket:wicket-extensions (>=9.0.0, <=9.23.0)

org.apache.wicket:wicket-extensions MAVEN version =9.0.0, =1.3.1.release, =3.0.4, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.23.1 and more Source cves: CVE-2026-76985https://vulne...

com.alibaba.rsocket:alibaba-broker-grpc-gateway (>=1.0.0.m1, <=1.1.6), com.santaobrand.nexus:core-grpc (0.0.1) +47 more potentially affected by CVE-2026-82594 via io.github.lognet:grpc-spring-boot-starter (>=2.4.4, <=5.2.0)

io.github.lognet:grpc-spring-boot-starter MAVEN version =2.4.4, =1.0.0.m1, =0.0.1, =1.0.7, =0.0.4, =1.7.0, =2025.02, =2025.02, =2023.05, =0.11.1, =0.11.1, =0.11.1, =2.1.2 and more Source cves: CVE-2026-82594 Source advisory: SNYK:JAVA-IOGITHUBLOGNET-19433209...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the processSecuredAnnotation method of GrpcServiceAuthorizationConfigurer, which uses MultiValueMap.addAll to combine class-level and method-level @Secured rules and evaluates the merged set with...

EUVD-2026-68297

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594: Improper Authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594

LogNet grpc-spring-boot-starter (up to version 5.2.0 ) contains an improper authorization flaw in its Annotation Processing component, exploitable over the network. The specific function affected is described as unknown. The attack requires low privileges and has high complexity , limiting practi...

CVE-2026-82594

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

PT-2026-83639

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security (2.2.0), org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security-4 (2.2.0) +4 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.7.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security 2.2.0 -...

org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security (2.2.0), org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security-4 (2.2.0) +4 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.7.6)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.cibseven.bpm.springboot:cibseven-bpm-spring-boot-starter-security 2.2.0 -...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.1.1, <=0.112.0) +1743 more potentially affected by CVE-2026-47892 via org.springframework:spring-webflux (>=6.1.0, <=6.1.21)

org.springframework:spring-webflux MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.6.0, =0.6.0, =0.5.0, =1.2.0, =1.1.0, =1.3.0 and more Source cves: CVE-2026-47892 Source advisory: GHSA-9QF2-26P9-2Q2Q...

com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring-boot-starter (>=2.3.12, <=2.3.20) +40 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (4.3.29.release)

org.springframework:spring-webmvc MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.fangjinuo.audit:audit-spring =2.3.12, =2.3.12, =4.0.1, =3.0.0, =3.0.0,...

ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +1247 more potentially affected by CVE-2026-47892 via org.springframework:spring-webflux (>=7.0.0, <=7.0.8)

org.springframework:spring-webflux MAVEN version =7.0.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =0.1.0, =0.1.0, =4.13.5, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0-beta.3, =4.7.5 and more Source cves: CVE-2026-47892 Source advisory: GHSA-9QF2-26P9-2Q2Q...

org.springframework.amqp:spring-rabbit-test (>=4.0.0, <=4.0.4), org.springframework.boot:spring-boot-starter-amqp-test (>=4.0.0, <=4.0.7) potentially affected by CVE-2026-59271 via org.springframework.amqp:spring-rabbit-junit (>=4.0.0, <=4.0.4)

org.springframework.amqp:spring-rabbit-junit MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.7 Source cves: CVE-2026-59271 Source advisory: MEND:CVE-2026-59271...