StackRadar

CVE-2026-41839

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.2
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
55
of 17,781 indexed, latest versions
Container images
70
deployed by those charts
Fix available
1 of 1
affected package

Spring Framework Escalation via Session Fixation in WebFlux

Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 70 images.

Affected packageAffected versionsFixed inImages
spring-webfluxmaven5.2.2.RELEASE, 5.2.7.RELEASE, 5.2.8.RELEASE, 5.3.1+28 more6.2.19, 7.0.870
OSV records
GHSA-4hfh-6x8g-gwpp

Charts affected

55 by stars
ChartLatestAffected imagesRadar Score
kafka-uikafka-uiVerified publisher1.6.51 of 1See more

kafka-ui kafka-ui 1.6.5

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.5.07cda86a33344
spring-webflux@6.2.17
6.2.19

Open the chart page →

729
spring-petclinic-cloudplatform9-communityVerified publisher0.2.02 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

2 of the 6 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
spring-webflux@5.2.7.RELEASE
no fix listed
platform9community/api-gateway:latest40a4970de568
spring-webflux@5.2.7.RELEASE
no fix listed

Open the chart page →

41,872
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
spring-webflux@6.2.2
6.2.19

Open the chart page →

14,000
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
spring-webflux@6.2.11
6.2.19

Open the chart page →

5,235
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
spring-webflux@5.3.27
no fix listed

Open the chart page →

28,534
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
spring-webflux@5.3.27
no fix listed

Open the chart page →

8,811
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-webflux@5.2.8.RELEASE
no fix listed

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-webflux@5.2.8.RELEASE
no fix listed

Open the chart page →

84,444
enavenav-service-architectureVerified publisher0.0.77 of 10See more

enav enav-service-architecture 0.0.7

7 of the 10 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
spring-webflux@7.0.6
7.0.8
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
spring-webflux@7.0.7
7.0.8
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
spring-webflux@7.0.7
7.0.8
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
spring-webflux@7.0.7
7.0.8
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
spring-webflux@7.0.6
7.0.8
ghcr.io/gla-rad/enav-eureka:latest05002092c621
spring-webflux@7.0.6
7.0.8
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
spring-webflux@7.0.6
7.0.8

Open the chart page →

15,860
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
spring-webflux@5.3.10
no fix listed

Open the chart page →

3,309
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
spring-webflux@6.1.1
no fix listed

Open the chart page →

13,610
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
spring-webflux@6.1.15
no fix listed

Open the chart page →

31,844
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
zbalogh/reservation-api-server:1.0.97c247e399a1f
spring-webflux@5.3.23
no fix listed

Open the chart page →

6,639
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
spring-webflux@5.3.23
no fix listed

Open the chart page →

9,837
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
spring-webflux@5.3.13
no fix listed

Open the chart page →

10,120
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
spring-webflux@5.3.24
no fix listed

Open the chart page →

13,486
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
spring-webflux@6.1.4
no fix listed

Open the chart page →

28,131
apimap-apiapimapOfficialVerified publisher1.8.111 of 1See more

apimap-api apimap 1.8.11

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
apimap/api:v1.8.11ae2b3ab00177
spring-webflux@5.3.23
no fix listed

Open the chart page →

2,231
kafka-uiappscodeVerified publisher2026.3.301 of 1See more

kafka-ui appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.5.07cda86a33344
spring-webflux@6.2.17
6.2.19

Open the chart page →

729
bluerange-serverbluerangeOfficialVerified publisher1.3.11 of 1See more

bluerange-server bluerange 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
bluerange/bluerange:26.1.307c8f73b55df
spring-webflux@6.2.6
6.2.19

Open the chart page →

1,816
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
spring-webflux@5.2.8.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
spring-webflux@5.2.8.RELEASE
no fix listed

Open the chart page →

88,335
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed

Open the chart page →

27,550
kafka-uidoubanVerified publisher1.5.21 of 1See more

kafka-ui douban 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
spring-webflux@6.2.3
6.2.19

Open the chart page →

1,269
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed

Open the chart page →

24,656
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed

Open the chart page →

27,256
shenyuerdeng2.4.211 of 2See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-webflux@5.2.2.RELEASE
no fix listed

Open the chart page →

12,513
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
spring-webflux@5.3.24
no fix listed

Open the chart page →

5,998
scorpio-brokerfiware0.3.39 of 10See more

scorpio-broker fiware 0.3.3

9 of the 10 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-webflux@5.3.13
no fix listed

Open the chart page →

55,600
scorpiobrokerfiware0.1.29 of 10See more

scorpiobroker fiware 0.1.2

9 of the 10 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-webflux@5.3.13
no fix listed
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-webflux@5.3.13
no fix listed

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-webflux@5.3.13
no fix listed

Open the chart page →

5,286
cc-spring-appgridgainVerified publisher1.0.61 of 1See more

cc-spring-app gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
gridgain/cloud-connector:2025.5.15ab838d7d3cb
spring-webflux@6.2.15
6.2.19

Open the chart page →

1,691
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
spring-webflux@6.1.16
no fix listed

Open the chart page →

25,017
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
apache/skywalking-ui:9.2.0295f1dc87d98
spring-webflux@5.3.19
no fix listed

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.9.180530f0308a5
spring-webflux@5.3.7
no fix listed

Open the chart page →

20,650
komgalinkding0.2.31 of 1See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
gotson/komga:1.22.0ba892ab3e082
spring-webflux@6.2.0
6.2.19

Open the chart page →

3,131
elastictranscoderluiscajl0.46.01 of 4See more

elastictranscoder luiscajl 0.46.0

1 of the 4 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
elastictranscoder/media-storage:f6d861a026208b8c2359
spring-webflux@5.3.8
no fix listed

Open the chart page →

58,160
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
spring-webflux@5.3.13
no fix listed

Open the chart page →

29,588
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
spring-webflux@5.3.21
no fix listed

Open the chart page →

6,852
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
spring-webflux@5.3.18
no fix listed

Open the chart page →

11,738
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
slagattollas/toposervice-practica:latestdc63973dae0d
spring-webflux@5.3.1
no fix listed

Open the chart page →

28,484
authentication-serviceredestroyder0.2.21 of 1See more

authentication-service redestroyder 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
redestroyder/authorization-service:0.0.1740364a619fd
spring-webflux@5.3.15
no fix listed

Open the chart page →

2,583
business-serviceredestroyder0.2.11 of 1See more

business-service redestroyder 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
redestroyder/business-service:0.0.1db03499a0726
spring-webflux@5.3.15
no fix listed

Open the chart page →

2,600
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
spring-webflux@5.3.20
no fix listed

Open the chart page →

16,101
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
spring-webflux@5.3.20
no fix listed

Open the chart page →

8,033
helm-chart-examplesalaboy0.1.01 of 1See more

helm-chart-example salaboy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
spring-webflux@5.2.8.RELEASE
no fix listed

Open the chart page →

2,847
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.5.11bd5756f6273
spring-webflux@5.3.20
no fix listed

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-webflux@5.2.2.RELEASE
no fix listed

Open the chart page →

12,513
retail-store-sample-ui-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-ui-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-ui:1.3.0ce3f2e935eb3
spring-webflux@6.2.10
6.2.19

Open the chart page →

836
sn-consolestreamnative1.13.01 of 1See more

sn-console streamnative 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-41839.

Container imageDigestPackageFixed in
streamnative/private-cloud-console:v2.3.27-all91e54375e154
spring-webflux@6.1.19
no fix listed

Open the chart page →

1,827

Container images carrying it

70 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oscarsotosanchez/toposervice:v1.0d4d020e9f272
spring-webflux@5.3.1
no fix listed
4
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-webflux@5.2.2.RELEASE
no fix listed
3
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
spring-webflux@5.2.8.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-webflux@5.2.8.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-webflux@5.2.8.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-webflux@5.2.8.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-webflux@5.2.8.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-webflux@5.2.8.RELEASE
no fix listed
2
hookiesolutions/webhookie:latest0629694246ba
spring-webflux@5.3.15
no fix listed
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-webflux@5.3.13
no fix listed
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-webflux@5.3.13
no fix listed
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-webflux@5.3.13
no fix listed
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-webflux@5.3.13
no fix listed
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-webflux@5.3.13
no fix listed
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-webflux@5.3.13
no fix listed
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-webflux@5.3.13
no fix listed
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-webflux@5.3.13
no fix listed
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-webflux@5.3.13
no fix listed
2
ghcr.io/kafbat/kafka-ui:v1.5.07cda86a33344
spring-webflux@6.2.17
6.2.19
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
spring-webflux@5.3.20
no fix listed
2
apache/hertzbeat:1.8.075d48a62748f
spring-webflux@6.2.2
6.2.19
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
spring-webflux@5.3.20
no fix listed
1
apache/skywalking-ui:9.2.0295f1dc87d98
spring-webflux@5.3.19
no fix listed
1
apache/skywalking-ui:8.9.180530f0308a5
spring-webflux@5.3.7
no fix listed
1
apimap/api:v1.8.11ae2b3ab00177
spring-webflux@5.3.23
no fix listed
1
bluerange/bluerange:26.1.307c8f73b55df
spring-webflux@6.2.6
6.2.19
1
camunda/zeebe:8.4.5ab5abc09e407
spring-webflux@6.1.4
no fix listed
1
conductoross/conductor:3.31.09fba127693e6
spring-webflux@6.1.19
no fix listed
1
elastictranscoder/media-storage:f6d861a026208b8c2359
spring-webflux@5.3.8
no fix listed
1
expediagroup/pitchfork:1.314f2cf61e7de9
spring-webflux@5.3.10
no fix listed
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
spring-webflux@5.2.8.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
spring-webflux@5.2.8.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
spring-webflux@5.2.8.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
spring-webflux@5.2.8.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
spring-webflux@5.2.8.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
spring-webflux@5.2.8.RELEASE
no fix listed
1
gotson/komga:1.22.0ba892ab3e082
spring-webflux@6.2.0
6.2.19
1
gridgain/cloud-connector:2025.5.15ab838d7d3cb
spring-webflux@6.2.15
6.2.19
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
spring-webflux@5.3.18
no fix listed
1
hugohg34/toposervice:0.0.2812a03b3f274
spring-webflux@5.3.13
no fix listed
1
openbas/platform:2.0.5d986d80b0a75
spring-webflux@6.1.16
no fix listed
1
platform9community/admin-server:latestde3fa9b70df1
spring-webflux@5.2.7.RELEASE
no fix listed
1
platform9community/api-gateway:latest40a4970de568
spring-webflux@5.2.7.RELEASE
no fix listed
1
redestroyder/authorization-service:0.0.1740364a619fd
spring-webflux@5.3.15
no fix listed
1
redestroyder/business-service:0.0.1db03499a0726
spring-webflux@5.3.15
no fix listed
1
rm3l/dev-feed-api:latest9a7f732245a3
spring-webflux@5.3.23
no fix listed
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
spring-webflux@5.3.13
no fix listed
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
spring-webflux@5.2.8.RELEASE
no fix listed
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-webflux@5.3.13
no fix listed
1
slagattollas/toposervice-practica:latestdc63973dae0d
spring-webflux@5.3.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.