de.adorsys.psd2:aspsp-mock-server (>=1.13, <=3.0), net.jworkflow:jworkflow.providers.mongodb (1.0) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.17.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.adorsys.psd2:aspsp-mock-server =1.13, =3.0 -...

cn.patterncat:job-event-store-mongo (0.0.2), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.6.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.patterncat:job-event-store-mongo 0.0.2 -...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.14.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.14.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.17.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

com.xieahui.springboot:spring-boot-easy-connection-pool (>=1.0-release, <=1.1.2-release), org.springframework.boot:spring-boot-starter-data-jdbc (2.2.7.release) +2 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.7.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.xieahui.springboot:spring-boot-easy-connection-pool...

cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2), io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.6.4, <=5.7.0) +8 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.13.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp 1.0.2 -...

org.springframework.boot:spring-boot-starter-data-elasticsearch (>=1.1.11.release, <=1.1.12.release), org.springframework.boot:spring-boot-starter-data-jpa (>=1.1.11.release, <=1.1.12.release) +22 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.8.5.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.boot:spring-boot-starter-data-elasticsearch...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.15.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.14.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.14.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

io.rhiot:rhiot-cloudlet-geofencing (0.1.1), io.rhiot:rhiot-iot-cloudlet-document-default (0.1.1) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.6.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - io.rhiot:rhiot-cloudlet-geofencing 0.1.1 -...

org.grails:gorm-mongodb-spring-boot (1.1.0.release), org.springframework.boot:spring-boot-starter-data-mongodb (>=1.1.0.release, <=1.1.3.release) +4 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.5.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:gorm-mongodb-spring-boot 1.1.0.release -...

com.github.shoothzj:sdk-distribute-impl-mongo (3.0.27.release), de.bwaldvogel:mongo-java-server-test-common (>=1.35.0, <=1.36.0) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.shoothzj:sdk-distribute-impl-mongo 3.0.27.release -...

org.grails:gorm-mongodb-spring-boot (1.0.0.m1), org.grails:grails-datastore-gorm-mongodb (>=2.0.0.release, <=2.0.1.release) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:gorm-mongodb-spring-boot 1.0.0.m1 -...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.21.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.22.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.22.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.ozwillo.datacore:ozwillo-datacore-core (1.10.1), org.springframework.boot:spring-boot-starter-data-mongodb (1.1.5.release) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.5.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.ozwillo.datacore:ozwillo-datacore-core 1.10.1 -...

org.springframework.boot:spring-boot-starter-data-mongodb (1.4.4.release), org.springframework.data:spring-data-mongodb-cross-store (1.9.7.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.7.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

com.github.lodsve:lodsve-amqp (>=2.4.8, <=2.5.7), org.springframework.amqp:spring-rabbit (1.5.3.release) +1 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.5.3.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.lodsve:lodsve-amqp =2.4.8, =2.5.7 -...

com.aol.microservices:microserver-boot (>=0.53.1, <=0.59), com.aol.microservices:microserver-core (>=0.5, <=0.59) +88 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.9.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.9.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.aol.microservices:microserver-boot =0.53.1, =0.5,...

com.kurento.kmf:kmf-content-api (>=3.0.5, <=4.3.1), com.kurento.kmf:kmf-repository-api (4.3.1) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.5.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.kurento.kmf:kmf-content-api =3.0.5, =5.0.3, =1.0.3.release,...

com.ethlo.keyvalue:keyvalue-mysql (>=1.0.0, <=1.1.2), org.springframework.boot:spring-boot-starter-data-jdbc (2.2.0.release) +1 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.0.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.ethlo.keyvalue:keyvalue-mysql =1.0.0, =1.1.2 -...

com.ifrabbit:spring-boot-starter-data-mybatis (1.0.17.release), com.ifrabbit:spring-data-mybatis (1.0.17.release) +28 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.5.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ifrabbit:spring-boot-starter-data-mybatis 1.0.17.release -...

org.bitbucket.swattu:datastore-utils (>=4.0.32, <=4.0.63), org.bitbucket.swattu:lock-utils (>=4.0.32, <=4.0.63) +4 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.bitbucket.swattu:datastore-utils =4.0.32, =4.0.32,...