CVE-2026-22737 vulnerabilities

Vulnerabilities for packages: nacos, nacos-docker, kayenta, conductor-fips, kafbat-ui-fips, apache-activemq, apache-activemq-fips, conductor, kayenta-fips, camunda, apache-nifi-registry, kafbat-ui, camunda-zeebe, thingsboard...

CVE-2026-22737

creationtimestamp| type| source ---|---|--- 2026-03-21 03:00:04+00:00| seen| https://spring.io/security/cve-2026-22737 2026-03-21 03:34:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mhk3wxvagj2a...

ai.ancf.lmos:lmos-operator (>=0.5.0 <=0.6.0), ai.telosforge:kimaira-starter-dms (>=1.2.4 <=1.2.6) +4926 more potentially affected by CVE-2026-22737 via org.springframework:spring-webmvc (>=6.2.0 <=6.2.16)

org.springframework:spring-webmvc MAVEN version =6.2.0, =0.5.0, =1.2.4, =1.2.4, =1.17.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.8.1 and more Source cves: CVE-2026-22737 Source advisory: OSV:GHSA-4773-3JFM-QMX3...