res (>=0.2.0 <=0.3.0), scroller-motion (>=0.0.1-beta.2 <=0.0.1-beta.3) potentially affected by CVE-2026-42890 via actual (>=0.2.0 <=0.4.0)

actual NPM version =0.2.0, =0.2.0, =0.0.1-beta.2, =0.0.1-beta.3 Source cves: CVE-2026-42890 Source advisory: OSV:GHSA-7RVM-XJPP-63R9...

aad-fastapi (>=1.0.0 <=1.1.2), aad-fastapi-dl37 (>=1.0.0 <=1.0.3) +231 more potentially affected by CVE-2026-41479 via authlib (>=0.10.0 <=1.6.1)

authlib PYPI version =0.10.0, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =1.0.2, =1.2.0a20250730, =1.1.0, =1.2.0a20250730, =0.1.0, =0.1.0a1, =1.2.0, =1.2.0a20250730, =1.2.0a20250730, =1.2.0a20250730, =1.2.0, =1.2.1 and more Source cves: CVE-2026-41479 Source advisory: OSV:GHSA-W8P2-R796-3VMQ...

apheris-auth (=0.23.0), apheris-cli (>=0.51.0 <=0.52.0) +1 more potentially affected by CVE-2026-41479 via authlib (=1.7.0)

authlib PYPI version =1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - apheris-auth =0.23.0 - apheris-cli =0.51.0, =1.3.0, =1.3.0b4 Source cves: CVE-2026-41479 Source advisory: OSV:GHSA-W8P2-R796-3VMQ...

@omneedia/client-js (>=2.0.1 <=2.1.1), @omneedia/ssr (=0.0.2) +9 more potentially affected by CVE-2026-47430 via cordova-plugin-inappbrowser (>=3.2.0 <=5.0.0)

cordova-plugin-inappbrowser NPM version =3.2.0, =2.0.1, =0.5.72, =1.0.0-rc.3, =2.1.2, =0.0.1, =0.2.5, =0.2.7 - poad =2.1.1 - things-factory-on-tv =2.0.0 Source cves: CVE-2026-47430 Source advisory: SNYK:JS-CORDOVAPLUGININAPPBROWSER-17337040...

org.hswebframework.web:hsweb-system-authorization-oauth2 (>=4.0.8 <=5.0.1) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (>=4.0.10 <=5.0.1)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version =4.0.10, =4.0.8, =5.0.1 Source cves: CVE-2026-11477 Source advisory: SNYK:JAVA-ORGHSWEBFRAMEWORKWEB-17232077...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0 <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0 <=4.7.4) +2427 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (>=7.0.0-M1 <=7.0.7)

org.springframework:spring-webmvc MAVEN version =7.0.0-M1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.10.2 and more Source cves: CVE-2026-41844 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254121...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0 <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4 <=0.6.0) +9046 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (>=6.1.0 <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.8.7 and more Source cves: CVE-2026-41844 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254121...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +2678 more potentially affected by CVE-2026-41844 via org.springframework:spring-webflux (>=6.1.0 <=6.2.18)

org.springframework:spring-webflux MAVEN version =6.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.2.4, =1.2.4, =1.2.4, =1.2.6 and more Source cves: CVE-2026-41844 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254122...

africa.absa:inception-application (>=1.0.0 <=1.2.0), africa.absa:inception-test (>=1.0.0 <=1.2.0) +2168 more potentially affected by CVE-2026-41844 via org.springframework:spring-webflux (>=5.3.0 <=5.3.9)

org.springframework:spring-webflux MAVEN version =5.3.0, =1.0.0, =1.0.0, =j8.2.4.0, =v0.3.12, =v0.3.10, =v0.3.12, =4.1.27, =4.1.36, =1.3, =1.0, =1.0.4.R, =1.0.0, =1.0.3 and more Source cves: CVE-2026-41844 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254122...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4269 more potentially affected by CVE-2026-41845 via org.springframework:spring-web (>=7.0.0-M1 <=7.0.7)

org.springframework:spring-web MAVEN version =7.0.0-M1, =0.1.0, =0.1.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =0.1.0, =0.1.1, =4.7.0, =0.2.0, =0.5.0, =0.10.2 and more Source cves: CVE-2026-41845 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17255245...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4269 more potentially affected by CVE-2026-41854 via org.springframework:spring-web (>=7.0.0-M1 <=7.0.7)

org.springframework:spring-web MAVEN version =7.0.0-M1, =0.1.0, =0.1.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =0.1.0, =0.1.1, =4.7.0, =0.2.0, =0.5.0, =0.10.2 and more Source cves: CVE-2026-41854 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254521...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +22397 more potentially affected by CVE-2026-41852 via org.springframework:spring-expression (>=6.1.0 <=6.2.18)

org.springframework:spring-expression MAVEN version =6.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.12.1 - ai.astraform:remote-domain-author-kit-java =0.1.0 and more Source cves: CVE-2026-41852 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17253570...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +2562 more potentially affected by CVE-2026-41710 via org.springframework.retry:spring-retry (>=2.0.0 <=2.0.12)

org.springframework.retry:spring-retry MAVEN version =2.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0 - ai.superstream:spring-kafka =3.0.1-alpha1 and more Source cves: CVE-2026-41710 Source advisory:...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0 <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4 <=0.6.0) +9046 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (>=6.1.0 <=6.2.18)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.8.7 and more Source cves: CVE-2026-41841 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254527...

africa.absa:inception-api (>=1.0.0 <=1.2.0), africa.absa:inception-codes-api (>=1.0.0 <=1.2.0) +11591 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=5.3.0 <=5.3.9)

org.springframework:spring-webmvc MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.2, =1.4.2, =1.6.6, =1.6.6.1 - ai.platon:distributed-lock-example =1.4.2 and more Source cves: CVE-2026-41846 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-1725406...

africa.absa:inception-api (>=1.0.0 <=1.2.0), africa.absa:inception-application (>=1.0.0 <=1.2.0) +31266 more potentially affected by CVE-2026-41851 via org.springframework:spring-core (>=5.3.0 <=5.3.9)

org.springframework:spring-core MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2026-41851 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17255206...

africa.absa:inception-api (>=1.0.0 <=1.2.0), africa.absa:inception-application (>=1.0.0 <=1.2.0) +31266 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (>=5.3.0 <=5.3.9)

org.springframework:spring-core MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2026-41848 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254051...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +2678 more potentially affected by CVE-2026-41842 via org.springframework:spring-webflux (>=6.1.0 <=6.2.18)

org.springframework:spring-webflux MAVEN version =6.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.2.4, =1.2.4, =1.2.4, =1.2.6 and more Source cves: CVE-2026-41842 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254543...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4269 more potentially affected by CVE-2026-41839 via org.springframework:spring-web (>=7.0.0-M1 <=7.0.7)

org.springframework:spring-web MAVEN version =7.0.0-M1, =0.1.0, =0.1.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =0.1.0, =0.1.1, =4.7.0, =0.2.0, =0.5.0, =0.10.2 and more Source cves: CVE-2026-41839 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254128...

be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-amqp (=2.12.0), com.almis.awe.clients:test-react (>=0.0.13 <=1.0.5) +699 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.1.0 <=6.2.18)

org.springframework:spring-jms MAVEN version =6.1.0, =0.0.13, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.12.0 and more Source cves: CVE-2026-41855 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254113...