at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c, <=63.v7e87d06b_a_30c) +2285 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (>=6.4.0, <=6.4.13)

org.springframework.security:spring-security-web MAVEN version =6.4.0, =0.0.1, =55.v51410e712e0c, =1.0.1, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =1.0.18 - cc.zzzyu.nacos:nacos-ai 3.1.1 - cc.zzzyu.nacos:nacos-cmdb 3.1.1 - cc.zzzyu.nacos:nacos-config 3.1.1 - cc.zzzyu.nacos:nacos-console...

am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +71 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.1.4.release)

org.springframework.security:spring-security-web MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =3.0.1.3,...

com.ahome-it:ahome-tooling-server-core (>=1.1.19-release, <=1.1.27-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.23-release, <=1.1.27-release) +57 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.0.release)

org.springframework.security:spring-security-web MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.19-release,...

au.org.consumerdatastandards:client-cli (>=1.1.1, <=1.12.0), com.atlassian.asap:asap-server-spring-security (>=2.21.8, <=2.21.9) +107 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.11.release)

org.springframework.security:spring-security-web MAVEN version 4.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - au.org.consumerdatastandards:client-cli =1.1.1, =2.21....

cn.springcloud.gray:spring-cloud-gray-server (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-cluster-http-synchro-plugin (>=a.2.0.0.rc1, <=a.2.0.0) +156 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.13.release)

org.springframework.security:spring-security-web MAVEN version 4.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - cn.springcloud.gray:spring-cloud-gray-server =a.1.1.1,...

org.springframework.security:spring-security-cas (4.2.14.release), org.springframework.security:spring-security-openid (4.2.14.release) +2 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.14.release)

org.springframework.security:spring-security-web MAVEN version 4.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.springframework.security:spring-security-cas...

com.github.waffle.demo:waffle-spring-filter (2.3.0), com.github.waffle.demo:waffle-spring-form (2.3.0) +41 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.17.release)

org.springframework.security:spring-security-web MAVEN version 4.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.waffle.demo:waffle-spring-filter 2.3.0 -...

africa.absa:inception-oauth2-resource-server (>=1.0.0, <=1.2.0), ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0) +6131 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (>=5.0.0.release, <=5.7.14)

org.springframework.security:spring-security-web MAVEN version =5.0.0.release, =1.0.0, =4.4.0.0, =0.1.2, =0.5.0, =j8.2.4.0, =j8.2.4.0, =0.0.2, =0.0.3, =5.3.1, =6.4.2 - au.net.causal.shoelaces:shoelaces-apphome-integration-tests-common 2.0 -...

com.capitalone.dashboard:api (>=3.3.0, <=3.4.52), com.capitalone.dashboard:api-audit (>=3.5.1, <=3.7.33) +71 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.18.release)

org.springframework.security:spring-security-web MAVEN version 4.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.capitalone.dashboard:api =3.3.0, =3.5.1, =3.2.0,...

be.looorent:spring-security-jwt (>=0.1, <=0.8), br.jus.stf.digital:core (0.1.0) +48 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.1.1.release)

org.springframework.security:spring-security-web MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - be.looorent:spring-security-jwt =0.1, =1.0.0-rc, =0.5.0...

com.portlandwebworks:pww-commons (>=1.0, <=1.0.2), de.itsvs:cwtrpc-security (0.9.0) +12 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.0.6.release)

org.springframework.security:spring-security-web MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.portlandwebworks:pww-commons =1.0, =1.0.2 -...

com.github.dblock.waffle:waffle-spring-security3 (>=1.5, <=1.6), com.paddypowerbetfair.springframework:spring-security-saml-keys-rollover (1.0.2) +23 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.1.2.release)

org.springframework.security:spring-security-web MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.dblock.waffle:waffle-spring-security3 =1.5,...

com.cloudseal.client:cloudseal-spring-extension (>=1.2.1, <=1.2.7), com.cloudseal.client:spring-example (>=1.2.1, <=1.2.7) +135 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.1.3.release)

org.springframework.security:spring-security-web MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.cloudseal.client:cloudseal-spring-extension =1.2.1,...

at.molindo.social:spring-social-security (1.1.0.release), cn.jhc:spring-social-qq (>=0.0.2, <=0.0.5) +105 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.2.3.release)

org.springframework.security:spring-security-web MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - at.molindo.social:spring-social-security 1.1.0.release ...

com.auth0:spring-security-auth0 (0.2), com.brienwheeler.web:web-spring-security (>=1.0-release, <=1.11) +34 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.2.4.release)

org.springframework.security:spring-security-web MAVEN version 3.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.auth0:spring-security-auth0 0.2 -...

co.paralleluniverse:comsat-spring-security (0.3.0), com.bq.corbel:oauth-server (>=1.31.1, <=1.35.0) +231 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.2.5.release)

org.springframework.security:spring-security-web MAVEN version 3.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - co.paralleluniverse:comsat-spring-security 0.3.0 -...

com.ge.predix:uaa-token-lib (>=3.3.2, <=4.0.1), com.github.lizixiang:triph-common (0.0.1-release) +96 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.2.10.release)

org.springframework.security:spring-security-web MAVEN version 3.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ge.predix:uaa-token-lib =3.3.2, =1.0.6, =1.0.1,...

com.keyholesoftware:khs-sherpa-spring (>=1.2.0, <=1.2.1), org.codehaus.spring-security-oauth:spring-security-oauth (>=3.9.ss3, <=3.11.ss3) +9 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.0.0.release)

org.springframework.security:spring-security-web MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.keyholesoftware:khs-sherpa-spring =1.2.0, =3.9.ss3,...

com.ahome-it:ahome-tooling-server-core (>=1.1.0-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.0-release, <=1.1.3-release) +35 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.1.0.release)

org.springframework.security:spring-security-web MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.0-release,...

com.ahome-it:ahome-tooling-server-core (>=1.1.5-release, <=1.1.9-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.5-release, <=1.1.9-release) +54 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.1.2.release)

org.springframework.security:spring-security-web MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.5-release,...