org.pac4j:spring-security-pac4j (>=1.2.3, <=1.2.4), org.springframework.security:spring-security-cas (3.2.2.release) +3 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.2.2.release)

org.springframework.security:spring-security-web MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.pac4j:spring-security-pac4j =1.2.3, =1.2.4 -...

com.17jee:e-cloud-authorize (3.0.0.release), com.17jee:e-cloud-gateway (>=3.0.0, <=3.0.1.1) +44 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.2.8.release)

org.springframework.security:spring-security-web MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.17jee:e-cloud-authorize 3.0.0.release -...

africa.absa:inception-oauth2-resource-server (>=1.0.0, <=1.2.0), ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0) +6131 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (>=5.0.0.release, <=5.7.14)

org.springframework.security:spring-security-web MAVEN version =5.0.0.release, =1.0.0, =4.4.0.0, =0.1.2, =0.5.0, =j8.2.4.0, =j8.2.4.0, =0.0.2, =0.0.3, =5.3.1, =6.4.2 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 -...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +229 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.0.3.release)

org.springframework.security:spring-security-web MAVEN version 4.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

co.paralleluniverse:comsat-spring-boot-security (0.7.0), co.paralleluniverse:comsat-spring-security (0.7.0) +226 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.0.4.release)

org.springframework.security:spring-security-web MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - co.paralleluniverse:comsat-spring-boot-security 0.7.0 -...

com.ahome-it:ahome-tooling-server-core (>=1.1.0-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.0-release, <=1.1.3-release) +35 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.1.0.release)

org.springframework.security:spring-security-web MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.0-release,...

com.ahome-it:ahome-tooling-server-core (>=1.1.5-release, <=1.1.9-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.5-release, <=1.1.9-release) +54 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.1.2.release)

org.springframework.security:spring-security-web MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.5-release,...

com.capitalone.dashboard:core (>=3.7.20, <=3.9.9), org.ff4j:ff4j-security-spring (>=1.8.2, <=1.8.7) +13 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.1.5.release)

org.springframework.security:spring-security-web MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.capitalone.dashboard:core =3.7.20, =1.8.2,...

am.ik.home:uaa-client (>=1.3.0, <=1.8.1), am.ik.home:uaa-integration-test (>=1.3.0, <=1.8.1) +86 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.1.release)

org.springframework.security:spring-security-web MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =0.2.0,...

cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-eureka-server (>=0.0.1, <=1.0.1.u1) +90 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.5.release)

org.springframework.security:spring-security-web MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - cn.home1:spring-cloud-config-server =0.0.1, =0.0.1,...

com.antheminc.oss:nimbus-core (>=1.1.7, <=1.2.0), com.antheminc.oss:nimbus-entity-dsl (>=1.1.7, <=1.2.0) +84 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.6.release)

org.springframework.security:spring-security-web MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.antheminc.oss:nimbus-core =1.1.7, =1.1.7, =1.1.7,...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.11), ch.sharedvd.tipi:tipi-engine (>=1.1.10, <=1.1.11) +138 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.7.release)

org.springframework.security:spring-security-web MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

com.github.fosin:cdp-oauth2 (1.0.0.release), com.sap.cloud.lm.sl.cf:com.sap.cloud.lm.sl.cf.client (>=1.65.4, <=1.67.1) +101 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.8.release)

org.springframework.security:spring-security-web MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.fosin:cdp-oauth2 1.0.0.release -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +101 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.9.release)

org.springframework.security:spring-security-web MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

com.sdl.delivery:udp-service-container-core (>=11.0.0-1078, <=11.0.1-1016), org.springframework.security:spring-security-cas (4.2.16.release) +3 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.16.release)

org.springframework.security:spring-security-web MAVEN version 4.2.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.sdl.delivery:udp-service-container-core...

cc.chensoul.nacos:nacos-distribution (2.5.2), com.buession.security:buession-security-spring (>=3.0.0, <=3.0.1) +589 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (>=5.8.0, <=5.8.16)

org.springframework.security:spring-security-web MAVEN version =5.8.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =5.11.0, =5.11.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.4.0, =4.5.0, =4.5.0, =4.5.1 and more Source cves: CVE-2026-47838 Source advisory: OSV:GHSA-293Q-567P-WMWQ...

ai.langsa:ccaas-starter (>=cloud-0.1, <=0.6), ai.langsa:pom-ccaas-langsa (0.1) +3629 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (>=6.0.0, <=6.3.10)

org.springframework.security:spring-security-web MAVEN version =6.0.0, =cloud-0.1, =0.5.2, =0.5.0, =7.0.0, =7.2.0 and more Source cves: CVE-2026-47838 Source advisory: GHSA-293Q-567P-WMWQ...

com.github.waffle.demo:waffle-spring-filter (3.0.0), com.github.waffle.demo:waffle-spring-form (3.0.0) +23 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.19.release)

org.springframework.security:spring-security-web MAVEN version 4.2.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.waffle.demo:waffle-spring-filter 3.0.0 -...

com.auth0:auth0-spring-security-api (>=1.3.1, <=1.4.0), com.capitalone.dashboard:hygieia-common (>=4.0.5, <=4.1.0) +29 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.15.release)

org.springframework.security:spring-security-web MAVEN version 4.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.auth0:auth0-spring-security-api =1.3.1, =4.0.5,...

be.dnsbelgium:rdap-server (1.1.0), co.paralleluniverse:comsat-spring-boot-security (0.4.0) +64 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.0.1.release)

org.springframework.security:spring-security-web MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - be.dnsbelgium:rdap-server 1.1.0 -...