africa.absa:inception-api (>=1.0.0 <=1.2.0), africa.absa:inception-codes-api (>=1.0.0 <=1.2.0) +11591 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (>=5.3.0 <=5.3.9)

org.springframework:spring-webmvc MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.2, =1.4.2, =1.6.6, =1.6.6.1 - ai.platon:distributed-lock-example =1.4.2 and more Source cves: CVE-2026-41842 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-1725454...

africa.absa:inception-api (>=1.0.0 <=1.2.0), africa.absa:inception-codes-api (>=1.0.0 <=1.2.0) +11591 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (>=5.3.0 <=5.3.9)

org.springframework:spring-webmvc MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.2, =1.4.2, =1.6.6, =1.6.6.1 - ai.platon:distributed-lock-example =1.4.2 and more Source cves: CVE-2026-41844 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-1725412...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0 <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0 <=0.2.0) +13926 more potentially affected by CVE-2026-41845 via org.springframework:spring-web (>=6.1.0 <=6.2.18)

org.springframework:spring-web MAVEN version =6.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.5.0, =0.6.0, =0.6.0, =0.5.0, =0.8.7 and more Source cves: CVE-2026-41845 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17255245...

africa.absa:inception-application (>=1.0.0 <=1.2.0), africa.absa:inception-test (>=1.0.0 <=1.2.0) +2168 more potentially affected by CVE-2026-41847 via org.springframework:spring-webflux (>=5.3.0 <=5.3.9)

org.springframework:spring-webflux MAVEN version =5.3.0, =1.0.0, =1.0.0, =j8.2.4.0, =v0.3.12, =v0.3.10, =v0.3.12, =4.1.27, =4.1.36, =1.3, =1.0, =1.0.4.R, =1.0.0, =1.0.3 and more Source cves: CVE-2026-41847 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17258561...

com.erudika:para-jar (>=1.51.2 <=1.51.4), com.erudika:para-server (>=1.51.2 <=1.54.7) +52 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=4.0.0-M1 <=4.0.3)

org.springframework.ldap:spring-ldap-core MAVEN version =4.0.0-M1, =1.51.2, =1.51.2, =0.2.2, =2.0.0, =2.0.0, =3.2.1, =3.2.1, =3.2.1, =2.5.0, =2.4.0, =2.4.0, =2.5.2 and more Source cves: CVE-2026-41720 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKLDAP-17260845...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0-20260516144515 <=1.0.0.ee-20260528111216), cc.zzzyu.nacos:default-auth-plugin (=3.1.1) +145 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.2.0 <=3.3.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.2.0, =1.0.0-20260516144515, =0.0.13, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.12.0 and more Source cves: CVE-2026-41720 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKLDAP-17260845...

io.javalin:javalin-micrometer (>=7.0.0 <=7.2.2), nl.tno:c2sim-server (>=1.0.3 <=2.0.0) potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (>=1.16.1 <=1.16.5)

io.micrometer:micrometer-jetty12 MAVEN version =1.16.1, =7.0.0, =1.0.3, =2.0.0 Source cves: CVE-2026-40984 Source advisory: SNYK:JAVA-IOMICROMETER-17260887...

io.javalin:javalin-micrometer (=7.0.0-alpha.3) potentially affected by CVE-2026-40984 via io.micrometer:micrometer-jetty12 (=1.14.2)

io.micrometer:micrometer-jetty12 MAVEN version =1.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-jetty12 and may be impacted: - io.javalin:javalin-micrometer =7.0.0-alpha.3 Source cves: CVE-2026-40984 Source advisory:...

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +8632 more potentially affected by CVE-2026-41851 via org.springframework:spring-core (>=7.0.0-M1 <=7.0.7)

org.springframework:spring-core MAVEN version =7.0.0-M1, =0.1.0, =0.1.0, =4.5.0, =4.7.11, =4.5.0, =4.5.0, =4.3.0, =4.3.0, =4.3.0, =4.7.0, =4.7.4, =4.7.4, =4.3.0, =4.7.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-41851 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17255206...

ai.driftkit:driftkit-workflow-controllers (>=0.7.5 <=0.8.7), ai.driftkit:driftkit-workflow-engine-spring-boot-starter (>=0.7.0 <=0.8.7) +1200 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=6.1.0 <=6.2.18)

org.springframework:spring-websocket MAVEN version =6.1.0, =0.7.5, =0.7.0, =0.5.0, =0.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.6, =1.0.1, =1.0.31 and more Source cves: CVE-2026-41838 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254123...

ch.rasc:wamp2spring-security-servlet (=4.0.0), ch.rasc:wamp2spring-servlet (=4.0.0) +820 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (>=7.0.0-M7 <=7.0.7)

org.springframework:spring-websocket MAVEN version =7.0.0-M7, =4.0.0.0-M2, =4.0.0.0-M2, =4.0.0, =1.21.9, =1.22.3 - com.aegisql:conveyor-service =1.7.3 - com.aizuda:snail-job-server-openapi =2.0.0 - com.aizuda:snail-job-server-service =2.0.0 - com.aizuda:snail-job-server-starter =2.0.0 -...

africa.absa:inception-api (>=1.0.0 <=1.2.0), africa.absa:inception-application (>=1.0.0 <=1.2.0) +16935 more potentially affected by CVE-2026-41853 via org.springframework:spring-web (>=5.3.0 <=5.3.9)

org.springframework:spring-web MAVEN version =5.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.2, =4.6.0.0 - ai.apiverse:apipulse =1.0.1 and more Source cves: CVE-2026-41853 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254109...

dbgate-serve (>=7.1.3-alpha.3 <=7.1.13), dbmodel (>=7.1.3-alpha.3 <=7.1.13) potentially affected by CVE-2026-48017 via dbgate-api (>=7.1.10 <=7.1.8)

dbgate-api NPM version =7.1.10, =7.1.3-alpha.3, =7.1.3-alpha.3, =7.1.13 Source cves: CVE-2026-48017 Source advisory: SNYK:JS-DBGATEAPI-17223766...

0lever-utils (>=0.0.2 <=0.0.7), 2keys (=0.5.1) +5826 more potentially affected by CVE-2026-45409 via idna (>=2.0.0 <=3.14.0)

idna PYPI version =2.0.0, =0.0.2, =0.0.1a0, =0.0.2, =0.0.6, =0.1.0, =0.1.3, =0.0.3, =19.11.0, =0.2.0rc1, =1.1.0rc1 and more Source cves: CVE-2026-45409 Source advisory: OSV:PYSEC-2026-215...

17fe-ui23 (>=0.0.0 <=0.0.24), @2kog/pkg-editor (>=0.0.1 <=0.1.3) +584 more potentially affected by CVE-2026-47761 via tinymce (>=6.0.0 <=7.5.1)

tinymce NPM version =6.0.0, =0.0.0, =0.0.1, =12.1.0, =4.1.0, =1.0.0-beta.1, =4.1.2-rc, =1.0.0, =0.1.0, =0.1.19, =0.1.0, =0.1.1 and more Source cves: CVE-2026-47761 Source advisory: OSV:GHSA-VG35-5WQ7-3X7W...

3h1-ui (>=2.14.41 <=3.0.0-next.258), @abt-desk/apm (>=0.0.1 <=0.33.12) +1204 more potentially affected by CVE-2026-47761 via tinymce (>=4.5.1 <=5.10.9)

tinymce NPM version =4.5.1, =2.14.41, =0.0.1, =0.1.0, =0.1.2, =0.3.7, =0.1.17, =0.1.0, =0.0.1, =1.0.0, =0.2.0-0, =1.0.18-beta.8, =1.0.0, =1.2.3-beta.1, =0.1.1, =0.1.11 and more Source cves: CVE-2026-47761 Source advisory: OSV:GHSA-VG35-5WQ7-3X7W...

17fe-ui23 (>=0.0.0 <=0.0.24), @2kog/pkg-editor (>=0.0.1 <=0.1.3) +584 more potentially affected by CVE-2026-47762 via tinymce (>=6.0.0 <=7.5.1)

tinymce NPM version =6.0.0, =0.0.0, =0.0.1, =12.1.0, =4.1.0, =1.0.0-beta.1, =4.1.2-rc, =1.0.0, =0.1.0, =0.1.19, =0.1.0, =0.1.1 and more Source cves: CVE-2026-47762 Source advisory: OSV:GHSA-V98H-VMPC-FPQV...

bsign-ui (>=0.0.3 <=0.0.5), gc-nimbus-ui (>=3.0.0 <=3.0.12) potentially affected by CVE-2026-47759 via tinymce (>=8.0.2 <=8.2.2)

tinymce NPM version =8.0.2, =0.0.3, =3.0.0, =3.0.12 Source cves: CVE-2026-47759 Source advisory: OSV:GHSA-Q742-QVGC-GC2F...

17fe-ui23 (>=0.0.0 <=0.0.24), @2kog/pkg-editor (>=0.0.1 <=0.1.3) +584 more potentially affected by CVE-2026-47759 via tinymce (>=6.0.0 <=7.5.1)

tinymce NPM version =6.0.0, =0.0.0, =0.0.1, =12.1.0, =4.1.0, =1.0.0-beta.1, =4.1.2-rc, =1.0.0, =0.1.0, =0.1.19, =0.1.0, =0.1.1 and more Source cves: CVE-2026-47759 Source advisory: OSV:GHSA-Q742-QVGC-GC2F...

17fe-ui23 (>=0.0.0 <=0.0.24), @2kog/pkg-editor (>=0.0.1 <=0.1.3) +554 more potentially affected by CVE-2026-47760 via tinymce (>=6.8.1 <=7.0.1)

tinymce NPM version =6.8.1, =0.0.0, =0.0.1, =12.1.0, =4.1.0, =1.0.0-beta.1, =4.1.2-rc, =1.0.0, =0.1.0, =0.1.0, =0.1.1, =0.1.7 - @arkxos/arkos-example =0.1.0 and more Source cves: CVE-2026-47760 Source advisory: OSV:GHSA-MH5M-5HW4-5C69...