org.springframework.amqp:spring-rabbit (1.4.6.release), org.springframework.boot:spring-boot-starter-amqp (>=1.2.7.release, <=1.2.8.release) +5 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.4.6.release)

org.springframework.amqp:spring-amqp MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.4.6.release -...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.2.0-rc1, <=5.2.0-rc3), org.springframework.amqp:spring-rabbit (1.6.10.release) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.6.10.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-amqp =5.2.0-rc1,...

com.github.double-bin:commons-spring-boot-starter (1.0.1), com.netshoes:spring-cloud-sleuth-amqp (>=0.8, <=0.9) +18 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.double-bin:commons-spring-boot-starter 1.0.1 -...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-40988 Source advisory: GHSA-M69X-PW9P-7J3Q...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-41694 Source advisory: OSV:GHSA-WW38-37G9-M3Q3...

com.github.codefrogcc:allocation (>=1.0.0, <=1.1.4), com.github.codefrogcc:commons-config (>=1.0.0, <=1.2.6) +8 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.8.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.codefrogcc:allocation =1.0.0, =1.0.0, =1.2.6 -...

com.eworkcloud:ework-cloud-starter-mongo (>=1.5.6, <=1.8.6), org.springframework.boot:spring-boot-starter-data-mongodb (1.5.20.release) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.20.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.eworkcloud:ework-cloud-starter-mongo =1.5.6, =1.8.6 -...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.3.6.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =1.1.7.release,...

in.clouthink.daas:daas-token (>=1.0.0, <=1.8.1), io.github.jhipster.loaded:agent (>=0.5, <=0.12) +7 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - in.clouthink.daas:daas-token =1.0.0, =0.5, =0.5, =0.5, =0.5,...

org.springframework.boot:spring-boot-starter-pulsar-reactive (>=3.3.0, <=3.3.13) potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar-reactive (>=1.1.0, <=1.1.13)

org.springframework.pulsar:spring-pulsar-reactive MAVEN version =1.1.0, =3.3.0, =3.3.13 Source cves: CVE-2026-41732 Source advisory: MEND:CVE-2026-41732...

io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.11), io.github.shuigedeng:taotao-boot-starter-mq-pulsar (>=2025.02, <=2025.11) +7 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=1.2.0, <=1.2.17)

org.springframework.pulsar:spring-pulsar MAVEN version =1.2.0, =2025.02, =2025.02, =2025.02, =2025.02, =3.4.0, =3.4.0, =4.2.2, =1.2.0, =1.2.0, =1.2.17 Source cves: CVE-2026-41732 Source advisory: MEND:CVE-2026-41732...

org.springframework.boot:spring-boot-starter-pulsar (>=3.3.0, <=3.3.13), org.springframework.boot:spring-boot-starter-pulsar-reactive (>=3.3.0, <=3.3.13) +3 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=1.1.0, <=1.1.13)

org.springframework.pulsar:spring-pulsar MAVEN version =1.1.0, =3.3.0, =3.3.0, =1.1.0, =1.1.0, =1.1.13 Source cves: CVE-2026-41732 Source advisory: MEND:CVE-2026-41732...

com.epages:restdocs-api-spec (>=0.20.0, <=0.20.2), com.epages:restdocs-api-spec-mockmvc (>=0.20.0, <=0.20.2) +11 more potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-core (4.0.0)

org.springframework.restdocs:spring-restdocs-core MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.restdocs:spring-restdocs-core and may be impacted: - com.epages:restdocs-api-spec =0.20.0, =0.20.0, =0.20.0, =4.0....

com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate (>=2.3.12, <=2.3.20), com.github.fangjinuo.audit:audit-spring (>=2.3.12, <=2.3.20) +129 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (4.3.29.release)

org.springframework:spring-expression MAVEN version 4.3.29.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.github.fangjinuo.audit.entityloader:audit-entityloader-resttemplate...

com.almis.awe:awe-annotation (>=4.11.3, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.3, <=4.12.0) +627 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.2.0, <=6.2.18)

org.springframework:spring-jms MAVEN version =6.2.0, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.12.0 and more Source cves: CVE-2026-41855 Source advisory: OSV:GHSA-X863-P983-P4F7...

org.apache.cxf.systests:cxf-systests-uncategorized (>=3.2.8, <=3.2.9), org.springframework.boot:spring-boot-starter-activemq (1.5.19.release) +2 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.22.release)

org.springframework:spring-jms MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized =3.2.8, =3.2.9 -...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +7256 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (>=6.2.0, <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.8.4 and more Source cves: CVE-2026-41853 Source advisory: OSV:GHSA-CJPG-RGQ5-FR37...

com.assist4j:assist4j-core (>=1.0.6, <=1.0.52), com.assist4j:assist4j-data (>=1.0.6, <=1.0.52) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.15.release)

org.springframework:spring-jms MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.assist4j:assist4j-core =1.0.6, =1.0.6, =1.0.0, =1.0.0, =1.26, =1.26, =1.27 -...

org.springframework.boot:spring-boot-starter-hornetq (1.2.0.release), org.springframework.boot:spring-boot-starter-ws (1.2.0.release) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.1.3.release)

org.springframework:spring-jms MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.boot:spring-boot-starter-hornetq 1.2.0.release -...

ca.jeb:common-java (2014.10.01), ca.jeb:protobuf-serializer (2014.10.01) +3 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.0.7.release)

org.springframework:spring-jms MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - ca.jeb:common-java 2014.10.01 - ca.jeb:protobuf-serializer 2014.10.01 -...