com.github.eventasia:event-store (>=0.0.1.release, <=0.0.3.release), com.github.eventasia:eventasia-starter (>=0.0.4.release, <=0.0.10.release) +4 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.0.2.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.eventasia:event-store =0.0.1.release, =0.0.4.release,...

edu.asu.diging:giles-eco-requests (>=0.8, <=0.16), org.apereo.cas:cas-server-core-configuration-cloud-kafka (5.1.0-rc1) +98 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.1.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - edu.asu.diging:giles-eco-requests =0.8, =0.16 -...

io.kermoss:reactive-business-flow (0.0.1.release) potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.3.8.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - io.kermoss:reactive-business-flow 0.0.1.release Source cves: CVE-2026-41726...

de.idealo.kafka:kafka-encryption (0.1-20180118), de.idealo.kafka:kafka-encryption-demo-app (>=0.1-20180111, <=0.1-20180118) +1 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.3.2.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - de.idealo.kafka:kafka-encryption 0.1-20180118 -...

com.blibli.oss:kafka-plugin (>=0.0.1, <=2.1.0), com.github.cirola2000:idol-metadata (0.0.1) +65 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.7.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.blibli.oss:kafka-plugin =0.0.1, =0.0.5, =1.3.0.release, =1.3.0.release,...

org.springframework.cloud:spring-cloud-starter-bus-kafka (1.3.1.release), org.springframework.cloud:spring-cloud-stream-docs (chelsea.sr2) potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.4.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.cloud:spring-cloud-starter-bus-kafka 1.3.1.release -...

be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9), be.appify.prefab:prefab-core (0.2.0) +171 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (>=4.0.0, <=4.0.5)

org.springframework.kafka:spring-kafka MAVEN version =4.0.0, =0.2.0, =0.2.0, =7.0.0-alpha-springboot4, =7.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =14.0.0-alpha-springboot4, =12.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =2.0.0-alpha-springboot4,...

com.buession.cas:cas-server-support-logging (>=3.0.0, <=3.0.1), com.buession.cas:cas-server-support-logging-core (>=3.0.0, <=3.0.1) +101 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (>=2.9.0, <=2.9.13)

org.springframework.kafka:spring-kafka MAVEN version =2.9.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.1.34, =1.3.0, =1.1.3, =1.2.3 - com.infobip.kafkistry:kafkistry-app 0.3.0 - com.infobip.kafkistry:kafkistry-auditing 0.3.0 - com.infobip.kafkistry:kafkistry-consume 0.3.0 -...

com.github.pscosta:kafka-proto-api (1.0), org.apereo.cas:cas-server-core-configuration-cloud-kafka (5.2.0-rc4) +1 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.2.3.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.pscosta:kafka-proto-api 1.0 -...

ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-agentic-factory (>=1.2.4, <=1.2.6) +407 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (>=3.3.0, <=3.3.15)

org.springframework.kafka:spring-kafka MAVEN version =3.3.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =2.2.1, =8.15.0, =8.15.0, =8.15.0, =8.4.0, =11.11.0 and more Source cves: CVE-2026-41726 Source advisory: GHSA-XVFQ-4Q6Q-GXX7...

org.springframework.integration:spring-integration-kafka (2.1.0.release) potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.integration:spring-integration-kafka 2.1.0.release Sour...

com.huaweicloud.dis:huaweicloud-dis-spring-kafka (>=1.1.2, <=1.2.21), com.tencent.bk.devops.ci.common:common-kafka (>=1.3.0-rc.7-release, <=1.3.1-release-release) +3 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.8.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.huaweicloud.dis:huaweicloud-dis-spring-kafka =1.1.2, =1.3.0-rc.7-releas...

com.github.eventasia:eventasia-stream-kafka (>=0.0.12.release, <=0.0.13.release), org.apereo.cas:cas-server-core-configuration-cloud-kafka (>=5.1.0-rc4, <=5.1.9) +1 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.2.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.eventasia:eventasia-stream-kafka =0.0.12.release, =5.1.0-rc4,...

ai.langsa:ccaas-starter (>=cloud-0.1, <=0.6), ai.langsa:pom-ccaas-langsa (0.1) +264 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (>=3.2.0, <=3.2.10)

org.springframework.kafka:spring-kafka MAVEN version =3.2.0, =cloud-0.1, =1.0.10, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =3.3.0.0, =0.0.49, =1.0.7, =1.0.4, =1.0.4, =1.0.4, =1.0.5 and more Source cves: CVE-2026-41726 Source advisory: OSV:GHSA-XVFQ-4Q6Q-GXX7...

cn.stylefeng.roses:kernel-logger (>=1.0.0, <=2.2.3), com.github.lujiannt:kernel-logger (1.0.0) +4 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.2.2.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - cn.stylefeng.roses:kernel-logger =1.0.0, =0.0.2, =0.0.2, =5.2.0-rc1,...

org.springframework.integration:spring-integration-kafka (2.3.1.release) potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.3.10.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.integration:spring-integration-kafka 2.3.1.release...

org.springframework.cloud.stream.app:aggregate-counter-sink-kafka-09 (1.2.0.release), org.springframework.cloud.stream.app:bridge-processor-kafka-09 (1.2.0.release) +55 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.0.5.release)

org.springframework.kafka:spring-kafka MAVEN version 1.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.cloud.stream.app:aggregate-counter-sink-kafka-09...

Spring Data REST has Improper Access Control in its JSON Patch Implementation

Spring Data REST's JSON Patch application/json-patch+json implementation does not apply the write-access filter to intermediate path segments when resolving a multi-segment JSON Pointer. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0...

org.springframework.data:spring-data-redis (1.7.0.release) potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.0.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - org.springframework.data:spring-data-redis 1.7.0.release Sour...

io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.beta6, <=1.1.0.cr1), io.fabric8:process-spring-boot-itests-service-invoicing (>=1.1.0.beta6, <=1.1.0.cr1) +2 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.0.2.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing =1.1.0.beta...