Backpatch Release Tags

As observed on July 10, 2026, the public finos-osera/backpatch-* repositories contained 61 release tags matching +backpatch.NNN across 55 repositories.

The reference OpenVEX feed covered the same 59 unique release-version strings. The difference between 61 tags and 59 unique release-version strings is expected because v2.6+backpatch.001 appears in three separate repositories: backpatch-commons-lang, backpatch-commons-configuration2, and backpatch-commons-io.

Summary

Source	Count
Public `backpatch-*` repositories scanned	60
Repositories with `+backpatch.NNN` release tags	55
`+backpatch.NNN` release tags	61
Unique release-version strings in repository tags	59
OpenVEX statements in reference feed	93
Backpatch product references in reference OpenVEX feed	118
Unique artifact versions in reference OpenVEX feed	84
Unique release-version strings in reference OpenVEX feed	59

Release tags by repository

Repository	Release tag
`backpatch-activemq`	`v5.14.5+backpatch.001`
`backpatch-bouncycastle`	`v1.47+backpatch.001`
`backpatch-camel`	`v2.25.4+backpatch.001`
`backpatch-camel`	`v2.25.4+backpatch.002`
`backpatch-camel`	`v2.25.4+backpatch.003`
`backpatch-camel`	`v2.25.4+backpatch.004`
`backpatch-commons-beanutils`	`v1.9.2+backpatch.001`
`backpatch-commons-collections`	`v3.2.1+backpatch.001`
`backpatch-commons-compress`	`v1.20+backpatch.001`
`backpatch-commons-configuration2`	`v2.6+backpatch.001`
`backpatch-commons-fileupload`	`v1.3.1+backpatch.001`
`backpatch-commons-io`	`v2.6+backpatch.001`
`backpatch-commons-lang`	`v2.6+backpatch.001`
`backpatch-commons-text`	`v1.9+backpatch.001`
`backpatch-cxf`	`v3.5.11+backpatch.001`
`backpatch-dom4j`	`v1.6.1+backpatch.001`
`backpatch-fastjson`	`v1.2.68+backpatch.001`
`backpatch-graphql-java`	`v18.7+backpatch.001`
`backpatch-gson`	`v2.8.8+backpatch.001`
`backpatch-guava`	`v31.1-jre+backpatch.001`
`backpatch-h2`	`v1.4.200+backpatch.001`
`backpatch-hazelcast`	`v3.10.6+backpatch.001`
`backpatch-hibernate-core`	`v5.6.15.Final+backpatch.001`
`backpatch-httpclient5`	`v5.4.1+backpatch.001`
`backpatch-jackson-databind`	`v2.9.10.8+backpatch.001`
`backpatch-jetty`	`v9.4.58.v20250814+backpatch.001`
`backpatch-jodd-json`	`v5.0.3+backpatch.001`
`backpatch-kafka-clients`	`v3.8.1+backpatch.001`
`backpatch-log4j`	`v1.2.17+backpatch.001`
`backpatch-log4j-core`	`v2.14.1+backpatch.001`
`backpatch-mina-core`	`v2.0.25+backpatch.001`
`backpatch-netty`	`v3.10.6.Final+backpatch.001`
`backpatch-netty`	`v3.10.6.Final+backpatch.002`
`backpatch-netty`	`v3.10.6.Final+backpatch.003`
`backpatch-okhttp`	`v3.14.9+backpatch.001`
`backpatch-pac4j`	`v3.9.0+backpatch.001`
`backpatch-protobuf-java`	`v3.19.6+backpatch.001`
`backpatch-reactor-netty-http`	`v1.0.19+backpatch.001`
`backpatch-snakeyaml`	`v1.33+backpatch.001`
`backpatch-spring-cloud-config`	`v4.2.4+backpatch.001`
`backpatch-spring-cloud-function`	`v3.1.6+backpatch.001`
`backpatch-spring-cloud-gateway`	`v3.0.6+backpatch.001`
`backpatch-spring-framework`	`v5.3.39+backpatch.001`
`backpatch-spring-hateoas`	`v1.5.6+backpatch.001`
`backpatch-spring-integration-zip`	`v1.0.0.RELEASE+backpatch.001`
`backpatch-spring-kafka`	`v2.8.11+backpatch.001`
`backpatch-spring-ldap`	`v2.4.4+backpatch.001`
`backpatch-spring-security`	`v5.7.14+backpatch.001`
`backpatch-spring-security-oauth2`	`v2.0.9.RELEASE+backpatch.001`
`backpatch-spring-ws`	`v4.0.17+backpatch.001`
`backpatch-sshd-core`	`v2.9.1+backpatch.001`
`backpatch-struts2-core`	`v2.3.37+backpatch.001`
`backpatch-tapestry`	`v4.1.6+backpatch.001`
`backpatch-tapestry`	`v4.1.6+backpatch.002`
`backpatch-thymeleaf`	`v3.1.3.RELEASE+backpatch.001`
`backpatch-tika-core`	`v1.28.5+backpatch.001`
`backpatch-tomcat-embed-core`	`v8.5.100+backpatch.001`
`backpatch-undertow-core`	`v2.2.3.Final+backpatch.001`
`backpatch-velocity-engine-core`	`v2.2+backpatch.001`
`backpatch-xmlsec`	`v2.1.4+backpatch.001`
`backpatch-xstream`	`v1.4.17+backpatch.001`

Repositories without release tags

The following public backpatch repositories did not have a +backpatch.NNN release tag in the scan:

backpatch-avatica-core
backpatch-commons-vfs2
backpatch-logback
backpatch-spring-boot
backpatch-spring-data-commons