ROOT-APP-MAVEN-CVE-2026-41855 CVE-2026-41855 in org.springframework:spring-jms - Patched by Root

Root has patched CVE-2026-41855 in the org.springframework:spring-jms package for Root:Maven. Multiple fixed versions available...

org.springframework.ws:spring-ws-support (>=1.5.1, <=1.5.3) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.4)

org.springframework:spring-jms MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.springframework.ws:spring-ws-support =1.5.1, =1.5.3 Source cves: CVE-2026-41855 Source advisory...

org.apache.activemq:apache-activemq (5.1.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.1)

org.springframework:spring-jms MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.activemq:apache-activemq 5.1.0 Source cves: CVE-2026-41855 Source advisory:...

com.35liuqi:summer-web-framework (1.0), com.centurylink.mdw:mdw (>=6.0.05, <=6.1.06) +228 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.9.release)

org.springframework:spring-jms MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.35liuqi:summer-web-framework 1.0 - com.centurylink.mdw:mdw =6.0.05, =6.0.05, =6.0.05,...

com.netas.jmeter:com.netas.jmeter.gradle.plugin (>=1.0.0-2.13, <=1.0.3-2.13), gradle.plugin.com.netas.jmeter:jmeter-gradle-plugin (>=1.0.0-2.13, <=1.0.3-2.13) +98 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6)

org.springframework:spring-jms MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.netas.jmeter:com.netas.jmeter.gradle.plugin =1.0.0-2.13, =1.0.0-2.13, =1.0.5-2.13, =1.1.3, =0.1...

org.apache.servicemix.examples:org.apache.servicemix.examples.itests.tests (4.2.0), org.apache.servicemix.jbi.cluster:org.apache.servicemix.jbi.cluster.requestor (1.2.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec01)

org.springframework:spring-jms MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.servicemix.examples:org.apache.servicemix.examples.itests.tests 4.2.0 -...

org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support (>=2.4.2.release_1, <=2.4.2.release_2), org.springframework.integration:spring-integration-jms (4.2.13.release) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.9.release)

org.springframework:spring-jms MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support...

io.fabric8.fab.tests:fab-sample-camel-activemq-broker-share (>=1.1.0.beta1, <=1.1.0.cr2), io.fabric8.fab.tests:fab-sample-camel-activemq-share (>=1.1.0.beta1, <=1.1.0.cr2) +32 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.8.release)

org.springframework:spring-jms MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - io.fabric8.fab.tests:fab-sample-camel-activemq-broker-share =1.1.0.beta1, =1.1.0.beta1,...

com.cisco.oss.foundation.queue:queue-hornetq (1.1.0-1), com.hack23.cia:jms-broker (>=2015.12.20, <=2016.2.7) +48 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.4.release)

org.springframework:spring-jms MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.cisco.oss.foundation.queue:queue-hornetq 1.1.0-1 - com.hack23.cia:jms-broker =2015.12.2...

org.apache.cxf.systests:cxf-systests-transports (>=2.1.7, <=2.1.10), org.apache.cxf.systests:cxf-systests-uncategorized (>=2.1.7, <=2.1.10) +19 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.0.8)

org.springframework:spring-jms MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports =2.1.7, =2.1.7, =2.0.10, =2.0.10, =2.0.10, =2.0.10,...

com.espertech:esperio-springjms (>=4.8.0, <=7.1.0), org.broadleafcommerce:broadleaf-admin-module (>=2.0.0-ga, <=2.1.0-ga) +31 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.1.1.release)

org.springframework:spring-jms MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.espertech:esperio-springjms =4.8.0, =2.0.0-ga, =2.0.0-ga, =2.0.0-ga, =2.0.0-ga,...

com.ahome-it:ahome-tooling-server-core (>=1.1.0-release, <=1.1.1-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.0-release, <=1.1.1-release) +15 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.6.release)

org.springframework:spring-jms MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.0-release, =1.1.0-release, =1.1.0-release,...

org.apache.cxf.systests:cxf-systests-uncategorized (>=3.0.0-milestone2, <=3.0.6), org.sculptorgenerator:sculptor-framework-main (3.0.1) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.6.release)

org.springframework:spring-jms MAVEN version 3.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized =3.0.0-milestone2, =3.0.0.release,...

org.jiucai:appframework (2.0.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.1.0.release)

org.springframework:spring-jms MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.jiucai:appframework 2.0.0 Source cves: CVE-2026-41855 Source advisory:...

com.ahome-it:ahome-tooling-server-core (1.0.121-release), com.ahome-it:ahome-tooling-server-hazelcast (1.0.121-release) +18 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.2.release)

org.springframework:spring-jms MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.0.121-release -...

com.centurylink.mdw:mdw-common (>=6.0.03, <=6.0.04), io.fabric8.quickstarts:springboot-camel-amq (>=2.2.138, <=2.2.149) +14 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.7.release)

org.springframework:spring-jms MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.centurylink.mdw:mdw-common =6.0.03, =2.2.138, =0.1.18, =1.3.6.release, =1.3.6.release,...

org.apache.camel:camel-itest-spring32 (>=2.15.0, <=2.16.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.13.release)

org.springframework:spring-jms MAVEN version 3.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring32 =2.15.0, =2.16.0 Source cves: CVE-2026-41855 Source...

com.github.lynzabo.codegen:codegen-core (1.0-release), com.github.lynzabo.codegen:codegen-mavenplugin (1.0-release) +11 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.1.0.release)

org.springframework:spring-jms MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.github.lynzabo.codegen:codegen-core 1.0-release -...

org.jadira.jms:jms (3.2.0.ga), org.springframework.integration:spring-integration-jms (4.0.0.release) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.0.3.release)

org.springframework:spring-jms MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.jadira.jms:jms 3.2.0.ga - org.springframework.integration:spring-integration-jms...

org.apache.activemq:activemq-camel (>=5.11.4, <=5.12.3), org.apache.activemq:apache-activemq (>=5.11.4, <=5.12.3) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.16.release)

org.springframework:spring-jms MAVEN version 3.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.activemq:activemq-camel =5.11.4, =5.11.4, =7.1-b3, =7.1-b3, =7.1-b2, =7.1-b3,...