com.github.paulcwarren:spring-content-rest (0.0.5), com.github.paulcwarren:spring-content-rest-boot-starter (0.0.5) +6 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.6.4.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.paulcwarren:spring-content-rest 0.0.5 -...

io.github.shuigedeng:taotao-cloud-starter-mq-pulsar (>=2023.12, <=2024.02), io.github.shuigedeng:taotao-cloud-starter-mq-stream (>=2024.01, <=2024.02) +5 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=1.0.0, <=1.1.13)

org.springframework.pulsar:spring-pulsar MAVEN version =1.0.0, =2023.12, =2024.01, =3.2.0, =3.2.0, =4.1.0, =1.0.0, =1.1.0, =1.1.13 Source cves: CVE-2026-41732 Source advisory: OSV:GHSA-GG69-9WWP-6JX2...

org.springframework.boot:spring-boot-starter-data-rest (1.4.6.release), org.springframework.data:spring-data-rest-hal-browser (2.5.10.release) +1 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.5.10.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

com.sap.research.security.vulas:rest-backend (>=3.1.6, <=3.1.15), org.sakaiproject.edu-services.gradebook:gradebook-service-impl (>=20.0, <=20.6) +6 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.6.23.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.sap.research.security.vulas:rest-backend =3.1.6, =20.0...

com.github.zengfr.project:com.github.zengfr.project.common (0.0.1), com.github.zengfr.project:com.github.zengfr.project.pom (0.0.1) +9 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.6.3.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.zengfr.project:com.github.zengfr.project.common...

io.fabric8.jube.images.fabric8:springboot-webmvc (>=2.2.7, <=2.2.28), org.springframework.boot:spring-boot-starter-data-rest (>=1.2.5.release, <=1.2.6.release) +2 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.2.3.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - io.fabric8.jube.images.fabric8:springboot-webmvc =2.2.7,...

br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +82 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (>=4.5.0, <=4.5.11)

org.springframework.data:spring-data-rest-core MAVEN version =4.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41730 Source advisory: OSV:GHSA-P5MM-XWGQ-WHFR...

org.dspace:dspace-spring-rest (7.0-preview-1), org.springframework.boot:spring-boot-starter-data-rest (1.4.4.release) +2 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.5.7.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.dspace:dspace-spring-rest 7.0-preview-1 -...

org.springframework.data:spring-data-rest-webmvc (2.3.1.release) potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.3.1.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

com.github.paulcwarren:content-rest-spring-boot-starter (>=0.0.9, <=0.0.11), com.github.paulcwarren:spring-content-rest (>=0.0.9, <=0.0.11) +7 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.6.10.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.paulcwarren:content-rest-spring-boot-starter...

org.springframework.boot:spring-boot-starter-data-rest (1.3.8.release), org.springframework.data:spring-data-rest-hal-browser (2.4.5.release) +1 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.4.5.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.4.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

org.springframework.boot:spring-boot-starter-data-rest (1.5.18.release), org.springframework.data:spring-data-rest-hal-browser (2.6.17.release) +1 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.6.17.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

org.springframework.data:spring-data-rest-webmvc (2.2.0.release) potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.2.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

com.ixortalk:ixortalk-authorization-server (>=0.0.1, <=0.0.6), org.springframework.boot:spring-boot-starter-data-rest (1.5.21.release) +2 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.6.22.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.ixortalk:ixortalk-authorization-server =0.0.1, =0.0.6 ...

be.personify.iam:personify-api (>=1.5.3.release, <=1.5.8.release), be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.8.release) +29 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (>=4.4.0, <=4.4.13)

org.springframework.data:spring-data-rest-core MAVEN version =4.4.0, =1.5.3.release, =1.5.4.release, =1.5.4.release, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.11.1, =0.11.1, =0.11.1, =0.11.1, =3.0.16, =3.0.16, =3.0.17 and more Source cves: CVE-2026-41837 Source advisory: OSV:GHSA-M...

org.springframework.data:spring-data-rest-hal-browser (2.4.6.release), org.springframework.data:spring-data-rest-webmvc (2.4.6.release) potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.4.6.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...

Spring for Apache Pulsar: JsonPulsarHeaderMapper Trusted-Package Prefix Check Allows Unintended Subpackage Deserialization

JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages rather than applying a safe default...

org.springframework.data:spring-data-rest-webmvc (2.1.6.release) potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.1.6.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

com.github.codefrogcc:allocation (>=1.0.0, <=1.1.4), com.github.codefrogcc:commons-config (>=1.0.0, <=1.2.6) +4 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (2.6.13.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.codefrogcc:allocation =1.0.0, =1.0.0, =2.9.1,...

org.springframework.boot:spring-boot-starter-data-rest (1.4.7.release), org.springframework.data:spring-data-rest-hal-browser (2.5.11.release) +1 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.5.11.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...