44 matches found
ROOT-APP-MAVEN-CVE-2026-40999 CVE-2026-40999 in org.springframework.ws:spring-ws-core - Patched by Root
Root has patched CVE-2026-40999 in the org.springframework.ws:spring-ws-core package for Root:Maven. Multiple fixed versions available...
com.sun.jersey:jersey-spring (0.8-ea), org.springframework.ws:spring-ws-core (1.5.0) +4 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (2.5.2)
org.springframework:spring-webmvc MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.sun.jersey:jersey-spring 0.8-ea - org.springframework.ws:spring-ws-core 1.5.0 -...
net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +11 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (1.2.8)
org.springframework:spring-webmvc MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =0.5, =0.8, =0.8a Source cves: CVE-2026-47884...
cn.com.mooho:base (1.3.29.8), cn.openapis:hy.microservice (>=1.0.0, <=1.21.0) +75 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=3.1.0, <=3.1.8)
org.springframework.ws:spring-ws-core MAVEN version =3.1.0, =1.0.0, =0.0.1, =0.0.1, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =2022.04.001, =2022.04.001, =0.5.02, =0.3.0, =1.0.0, =1.0.2 - de.gematik.ti:vauchannel-client 1.4.0 and more Source cves: CVE-2026-40999 Source advisory: OSV:GHSA-WHPP-XV3H-RWXF...
cn.com.mooho:base (1.3.29.8), cn.openapis:hy.microservice (>=1.0.0, <=1.21.0) +75 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=3.1.0, <=3.1.8)
org.springframework.ws:spring-ws-core MAVEN version =3.1.0, =1.0.0, =0.0.1, =0.0.1, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =2022.04.001, =2022.04.001, =0.5.02, =0.3.0, =1.0.0, =1.0.2 - de.gematik.ti:vauchannel-client 1.4.0 and more Source cves: CVE-2026-40999 Source advisory: GHSA-WHPP-XV3H-RWXF...
br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +66 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=4.1.0, <=4.1.3)
org.springframework.ws:spring-ws-core MAVEN version =4.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-40999 Source advisory: GHSA-WHPP-XV3H-RWXF...
cn.openapis:hy.microservice (>=1.21.9, <=1.22.8), com.github.salilvnair:api-processor (1.0.6) +29 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=5.0.0, <=5.0.1)
org.springframework.ws:spring-ws-core MAVEN version =5.0.0, =1.21.9, =2.0.8, =8.9.0-alpha3, =1.0.0, =5.0.0-beta.1, =1.4.66, =4.19.0, =4.19.0, =8.0.0-rc1, =8.0.0-rc5 - org.citrusframework.mvn:citrus-maven-plugin 5.0.0-m1 - org.citrusframework:citrus-cucumber-all 5.0.0-m1 -...
cn.openapis:hy.microservice (>=1.21.9, <=1.22.8), com.github.salilvnair:api-processor (1.0.6) +29 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=5.0.0, <=5.0.1)
org.springframework.ws:spring-ws-core MAVEN version =5.0.0, =1.21.9, =2.0.8, =8.9.0-alpha3, =1.0.0, =5.0.0-beta.1, =1.4.66, =4.19.0, =4.19.0, =8.0.0-rc1, =8.0.0-rc5 - org.citrusframework.mvn:citrus-maven-plugin 5.0.0-m1 - org.citrusframework:citrus-cucumber-all 5.0.0-m1 -...
br.com.archbase:archbase-annotation-processor (>=1.0.1, <=1.0.31), br.com.archbase:archbase-app-framework (>=1.0.1, <=1.0.31) +78 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=4.0.0, <=4.0.17)
org.springframework.ws:spring-ws-core MAVEN version =4.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.31 and more Source cves: CVE-2026-40999 Source advisory: GHSA-WHPP-XV3H-RWXF...
br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +66 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=4.1.0, <=4.1.3)
org.springframework.ws:spring-ws-core MAVEN version =4.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-40999 Source advisory: OSV:GHSA-WHPP-XV3H-RWXF...
br.com.archbase:archbase-annotation-processor (>=1.0.1, <=1.0.31), br.com.archbase:archbase-app-framework (>=1.0.1, <=1.0.31) +78 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=4.0.0, <=4.0.17)
org.springframework.ws:spring-ws-core MAVEN version =4.0.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.31 and more Source cves: CVE-2026-40999 Source advisory: OSV:GHSA-WHPP-XV3H-RWXF...
br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +66 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=4.1.0, <=4.1.3)
org.springframework.ws:spring-ws-core MAVEN version =4.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-40999 Source advisory: MEND:CVE-2026-40999...
cn.openapis:hy.microservice (>=1.21.9, <=1.22.8), com.github.salilvnair:api-processor (1.0.6) +29 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=5.0.0, <=5.0.1)
org.springframework.ws:spring-ws-core MAVEN version =5.0.0, =1.21.9, =2.0.8, =8.9.0-alpha3, =1.0.0, =5.0.0-beta.1, =1.4.66, =4.19.0, =4.19.0, =8.0.0-rc1, =8.0.0-rc5 - org.citrusframework.mvn:citrus-maven-plugin 5.0.0-m1 - org.citrusframework:citrus-cucumber-all 5.0.0-m1 -...
cn.openapis:hy.microservice (>=1.21.9, <=1.22.8), com.github.salilvnair:api-processor (1.0.6) +29 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=5.0.0-m1, <=5.0.1)
org.springframework.ws:spring-ws-core MAVEN version =5.0.0-m1, =1.21.9, =2.0.8, =8.9.0-alpha3, =1.0.0, =5.0.0-beta.1, =1.4.66, =4.19.0, =4.19.0, =8.0.0-rc1, =8.0.0-rc5 - org.citrusframework.mvn:citrus-maven-plugin 5.0.0-m1 - org.citrusframework:citrus-cucumber-all 5.0.0-m1 -...
br.com.archbase:archbase-annotation-processor (>=1.0.1, <=2.1.21), br.com.archbase:archbase-app-framework (>=1.0.1, <=2.1.21) +100 more potentially affected by CVE-2026-40999 via org.springframework.ws:spring-ws-core (>=4.0.0, <=4.1.3)
org.springframework.ws:spring-ws-core MAVEN version =4.0.0, =1.0.1, =1.0.1, =1.0.1, =2.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =2.1.0, =2.0.0, =2.0.0, =1.0.6, =1.0.1, =2.1.21 and more Source cves: CVE-2026-40999 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320740...
net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +11 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (1.2.8)
org.springframework:spring-webmvc MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =0.5, =0.8, =0.8a Source cves: CVE-2026-41853...
com.sun.jersey:jersey-spring (0.8-ea), org.springframework.ws:spring-ws-core (1.5.0) +4 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.5.2)
org.springframework:spring-webmvc MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.sun.jersey:jersey-spring 0.8-ea - org.springframework.ws:spring-ws-core 1.5.0 -...
com.mysema.web:webmin (0.2.3), org.parancoe:parancoe (0.3.3) +11 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.0.7)
org.springframework:spring-webmvc MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.mysema.web:webmin 0.2.3 - org.parancoe:parancoe 0.3.3 - org.parancoe:parancoe-core 0.3.3 ...
net.sourceforge.jfacets:jfacets-acegi (>=3.1, <=3.2.1), org.acegisecurity:acegi-security (1.0.3) +11 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (1.2.8)
org.springframework:spring-webmvc MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.sourceforge.jfacets:jfacets-acegi =3.1, =0.5, =0.8, =0.8a Source cves: CVE-2026-41846...
org.apache.portals.bridges:springmvc (1.0.4), org.apache.portals.jetspeed-2:j2-admin (>=2.1.3, <=2.1.4) +13 more potentially affected by CVE-2026-41853 via org.springframework:spring-webmvc (2.0.5)
org.springframework:spring-webmvc MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.apache.portals.bridges:springmvc 1.0.4 - org.apache.portals.jetspeed-2:j2-admin =2.1.3,...