ai.langsa:ccaas-starter (>=cloud-0.1, <=0.6), ai.langsa:pom-ccaas-langsa (0.1) +6263 more potentially affected by CVE-2026-22746 via org.springframework.security:spring-security-core (>=6.0.0, <=6.5.9)

🗓️ 22 Apr 2026 12:25:07Reported by Vulners OSVType

vulnersosv🔗 security.snyk.io

Vulnerability in spring-security-core via transitive dependency in multiple AI libraries.

Reporter	Title	Published	Views	Family All 156
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	12 Aug 202611:52	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Observable Timing Discrepancy (CVE-2026-22746)	15 Jun 202620:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	28 May 202613:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	14 Jul 202623:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods API Management	28 Aug 202604:56	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of spring-security-core-6.5.9.jar, IBM Sterling Connect:Direct Web Services is vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition	6 Jun 202613:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2026	12 Jun 202622:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Spring Security affect IBM Sterling B2B Integrator and IBM Sterling File Gateway	15 Sep 202613:32	–	ibm
attackerkb	CVE-2026-22746	22 Apr 202605:02	–	attackerkb

25 Apr 2026 14:21Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.13.7

EPSS0.00215

SSVC

spring-security-core library transitive dependency