co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +47 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.0.8.release)

org.springframework:spring-webmvc MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 - co.paralleluniverse:comsat-spring-webm...

ch.sbb.releasetrain:jsfbootadapter (0.0.25), ch.sbb.releasetrain:webui (0.0.25) +343 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.2.7.release)

org.springframework:spring-webmvc MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.sbb.releasetrain:jsfbootadapter 0.0.25 - ch.sbb.releasetrain:webui 0.0.25 -...

au.com.mountain-pass:hyperstate (>=4, <=9), ch.sbb.releasetrain:action (>=0.0.21, <=0.0.22) +493 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.2.6.release)

org.springframework:spring-webmvc MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =0.0.21,...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +324 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.2.5.release)

org.springframework:spring-webmvc MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 -...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.0), com.canoo.dolphin-platform:dolphin-platform-server-spring (>=0.6.1, <=0.8.6) +158 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.5.release)

org.springframework:spring-webmvc MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.0 -...

ch.ralscha:extdirectspring (1.5.0), cn.enilu:flash-generator (1.0) +20 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.2.release)

org.springframework:spring-webmvc MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring 1.5.0 - cn.enilu:flash-generator 1.0 - cn.enilu:flash-web...

com.blitline:blitline-image-client-example (>=0.14.0, <=0.14.2), com.blitline:blitline-image-client-spring (>=0.14.0, <=0.14.2) +36 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.1.release)

org.springframework:spring-webmvc MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.blitline:blitline-image-client-example =0.14.0, =0.14.0, =1.3, =1.31, =1.2, =1.4,...

br.com.anteros:anteros-jsondoc-maven-plugin (1.0.0), br.com.anteros:anteros-jsondoc-springmvc (1.0.0) +13 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.0.release)

org.springframework:spring-webmvc MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - br.com.anteros:anteros-jsondoc-maven-plugin 1.0.0 -...

com.17jee:e-cloud-authorize (>=3.0.0, <=3.0.1.1), com.17jee:e-security-jwt (3.0.0.release) +155 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.0.9.release)

org.springframework:spring-webmvc MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.17jee:e-cloud-authorize =3.0.0, =1.0.24-release, =1.0.22-release, =1.0.18-release...

au.com.dius:pact-jvm-provider-spring_2.11 (>=3.4.0, <=3.5.18), au.com.dius:pact-jvm-provider-spring_2.12 (>=3.5.4-rc.0, <=3.5.18) +77 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.2.0.release)

org.springframework:spring-webmvc MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - au.com.dius:pact-jvm-provider-spring2.11 =3.4.0, =3.5.4-rc.0, =0.0.1, =0.1, =0.0.1,...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-security (1.1.4.release) +178 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.8.release)

org.springframework:spring-webmvc MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

ba.jamax.util:jamax-rest (>=1.3.1-release, <=1.3.4-release), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +392 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.6.release)

org.springframework:spring-webmvc MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ba.jamax.util:jamax-rest =1.3.1-release, =0.0.6, =0.1.0, =0.1.5, =1.0.13.release,...

am.ik.springmvc:new-controller (>=0.1.0, <=0.2.0), br.ufc.quixada.npi:npi-core-api (0.1.0) +125 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (4.1.4.release)

org.springframework:spring-webmvc MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - am.ik.springmvc:new-controller =0.1.0, =1.0.1, =0.1.0, =2.1, =0.1.5, =4.0.1,...

com.github.bluejoe2008:elfinder-servlet-2 (>=1.0, <=1.2), com.github.jknack:mwa-solr3 (0.4.0) +114 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.2.3.release)

org.springframework:spring-webmvc MAVEN version 3.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.bluejoe2008:elfinder-servlet-2 =1.0, =1.0.2, =2.9.4-sp.15, =2.9.4-sp.15,...

ch.ralscha:extdirectspring (>=1.3.0, <=1.3.1), com.github.tuxychandru:spring-mustache (1.0) +48 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.2.1.release)

org.springframework:spring-webmvc MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.3.0, =0.3.0, =1.0, =1.1.1.release, =1.2.0.release -...

cc.ecore:spring-jfinal-plugin (>=0.1.0, <=0.1.1), com.bnd-lib:bnd-chemistry (0.7.0) +59 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.2.0.release)

org.springframework:spring-webmvc MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cc.ecore:spring-jfinal-plugin =0.1.0, =0.1.1 - com.bnd-lib:bnd-chemistry 0.7.0 -...

com.github.kaylves:kaylves-easydao (0.0.1-release), com.github.ptomli.bedrock:bedrock-core (1.0.0) +58 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.1.4.release)

org.springframework:spring-webmvc MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.kaylves:kaylves-easydao 0.0.1-release -...

ch.ralscha:extdirectspring (1.2.3), com.github.jknack:mwa-solr3 (>=0.3.4, <=0.3.11) +85 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.1.3.release)

org.springframework:spring-webmvc MAVEN version 3.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring 1.2.3 - com.github.jknack:mwa-solr3 =0.3.4, =0.3.4, =0.3.3...

ch.ralscha:extdirectspring (>=1.2.0, <=1.2.2), com.3pillarglobal.labs:spring-integration-aws (>=1.0.0-release, <=1.1) +97 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.1.2.release)

org.springframework:spring-webmvc MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - ch.ralscha:extdirectspring =1.2.0, =1.0.0-release, =3.1.2, =3.1.2, =4.2.1, =4.2.1,...

cn.afterturn:easypoi-spring-boot-starter (>=0.2, <=4.0.0), cn.afterturn:easypoi-web (>=3.0.1, <=4.0.0) +162 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.1.1.release)

org.springframework:spring-webmvc MAVEN version 3.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - cn.afterturn:easypoi-spring-boot-starter =0.2, =3.0.1, =3.1.0, =3.1.0, =1.0.4,...