ROOT-APP-MAVEN-CVE-2026-41855 CVE-2026-41855 in org.springframework:spring-jms - Patched by Root

Root has patched CVE-2026-41855 in the org.springframework:spring-jms package for Root:Maven. Multiple fixed versions available...

io.fabric8.examples:fabric-activemq-demo (1.2.0.redhat-133), io.fabric8.mq:camel-amq (1.2.0.redhat-133) +6 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.12.release)

org.springframework:spring-jms MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - io.fabric8.examples:fabric-activemq-demo 1.2.0.redhat-133 - io.fabric8.mq:camel-amq...

com.github.dnvriend:akka-persistence-query-extensions_2.11 (>=0.0.1, <=0.0.5), com.github.dnvriend:reactive-activemq_2.11 (>=0.0.3, <=0.0.25) +33 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.5.release)

org.springframework:spring-jms MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.github.dnvriend:akka-persistence-query-extensions2.11 =0.0.1, =0.0.3, =2.12.3, =2.12.3,...

com.assist4j:assist4j-core (1.0.0), com.assist4j:assist4j-data (1.0.0) +258 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.13.release)

org.springframework:spring-jms MAVEN version 4.3.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.assist4j:assist4j-core 1.0.0 - com.assist4j:assist4j-data 1.0.0 -...

com.atomikos:transactions-spring-boot4 (6.0.1), com.atomikos:transactions-spring-boot4-integration-tests (6.0.1) +427 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=7.0.0-m7, <=7.0.7)

org.springframework:spring-jms MAVEN version =7.0.0-m7, =7.0.0-beta.1, =3.0.0, =4.0.0-m2, =4.0.0-m2, =0.17.0, =26.1.0, =2.0.0, =2.5.0 - io.kaoto.forage:forage-jms 1.5.0 and more Source cves: CVE-2026-41855 Source advisory: GHSA-X863-P983-P4F7...

com.ahome-it:ahome-tooling-server-core (>=1.0.94-release, <=1.0.108-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.100-release, <=1.0.107-release) +16 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.1.7.release)

org.springframework:spring-jms MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.0.94-release, =1.0.100-release, =1.0.96-release,...

org.apache.cxf.systests:cxf-systests-uncategorized (3.2.14), org.finra.herd:herd-dao (>=0.130.0, <=0.157.0) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.27.release)

org.springframework:spring-jms MAVEN version 4.3.27.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.2.14 - org.finra.herd:herd-dao...

org.jboss.snowdrop:snowdrop (>=2.0.0.final, <=2.0.5.final), org.jboss.snowdrop:snowdrop-namespace (>=1.2.0.cr1, <=2.0.0.cr1) +7 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec02)

org.springframework:spring-jms MAVEN version 2.5.6.sec02 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.jboss.snowdrop:snowdrop =2.0.0.final, =1.2.0.cr1, =1.0, =0.7, =0.7, =0.8.1 -...

com.gitlab.java-ebms-adapter:ebms-adapter-web (2.15.2-mic), com.gitlab.java-ebms-adapter:ebms-core (2.15.2-mic) +12 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.1.release)

org.springframework:spring-jms MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.gitlab.java-ebms-adapter:ebms-adapter-web 2.15.2-mic -...

org.apache.camel:camel-itest-spring40 (>=2.15.0, <=2.15.1), org.neuro4j:spring-jms-adapter (>=3.0.1, <=3.4.1) +3 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.0.8.release)

org.springframework:spring-jms MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring40 =2.15.0, =3.0.1, =1.1.9.release, =1.1.9.release,...

org.apache.camel:camel-amqp (2.5.0), org.apache.camel:camel-example-cxf (2.5.0) +29 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.0.4.release)

org.springframework:spring-jms MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-amqp 2.5.0 - org.apache.camel:camel-example-cxf 2.5.0 -...

org.grails:grails-core (>=1.2.0.rc2, <=1.3.0), org.grails:grails-crud (>=1.2.0.rc2, <=1.3.0) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.0.0.release)

org.springframework:spring-jms MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.grails:grails-core =1.2.0.rc2, =1.2.0.rc2, =1.2.0.rc2, =1.2.0, =1.2.0.rc2, =1.2.0.rc2,...

org.apache.cxf.systests:cxf-systests-uncategorized (>=3.0.12, <=3.0.16) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.17.release)

org.springframework:spring-jms MAVEN version 3.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized =3.0.12, =3.0.16 Source cves:...

be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-amqp (2.12.0), com.almis.awe.clients:test-react (>=0.0.11, <=1.0.5) +643 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.0.0, <=6.1.21)

org.springframework:spring-jms MAVEN version =6.0.0, =0.0.11, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.11.2 and more Source cves: CVE-2026-41855 Source advisory: OSV:GHSA-X863-P983-P4F7...

io.fabric8.fab.tests:fab-sample-camel-activemq-broker-share (>=1.1.0.cr3, <=1.2.0.beta2), io.fabric8.fab.tests:fab-sample-camel-activemq-share (>=1.1.0.cr3, <=1.2.0.beta2) +12 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.9.release)

org.springframework:spring-jms MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - io.fabric8.fab.tests:fab-sample-camel-activemq-broker-share =1.1.0.cr3, =1.1.0.cr3, =2.0.0,...

com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.9-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.4-release, <=1.1.9-release) +10 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.1.release)

org.springframework:spring-jms MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.4-release, =1.1.4-release, =1.1.4-release,...

com.ahome-it:ahome-tooling-server-core (1.0.109-release), com.ahome-it:ahome-tooling-server-hazelcast (1.0.109-release) +12 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.0.release)

org.springframework:spring-jms MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.0.109-release -...

org.apache.cxf.systests:cxf-systests-transports (>=2.1.7, <=2.1.10), org.apache.cxf.systests:cxf-systests-uncategorized (>=2.1.7, <=2.1.10) +19 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.0.8)

org.springframework:spring-jms MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports =2.1.7, =2.1.7, =2.0.10, =2.0.10, =2.0.10, =2.0.10,...

org.apache.servicemix.examples:org.apache.servicemix.examples.itests.tests (4.2.0), org.apache.servicemix.jbi.cluster:org.apache.servicemix.jbi.cluster.requestor (1.2.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.6.sec01)

org.springframework:spring-jms MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.servicemix.examples:org.apache.servicemix.examples.itests.tests 4.2.0 -...

org.apache.activemq:apache-activemq (5.1.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (2.5.1)

org.springframework:spring-jms MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.activemq:apache-activemq 5.1.0 Source cves: CVE-2026-41855 Source advisory:...