com.foilen:database-tools (0.4.4), org.nhind:config-service-jar (>=7.0, <=7.0.1) +3 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.4.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.foilen:database-tools 0.4.4 -...

com.infobip:infobip-spring-data-jdbc-querydsl (3.0.0), org.springframework.boot:spring-boot-starter-data-jdbc (2.2.1.release) +1 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.1.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.infobip:infobip-spring-data-jdbc-querydsl 3.0.0 -...

com.ethlo.keyvalue:keyvalue-mysql (>=1.0.0, <=1.1.2), org.springframework.boot:spring-boot-starter-data-jdbc (2.2.0.release) +1 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.0.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.ethlo.keyvalue:keyvalue-mysql =1.0.0, =1.1.2 -...

com.alibaba.smart.framework:smart-engine-extension-storage-mongodb (>=2.0.4, <=2.6.4), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.7.release) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.11.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

org.springframework.boot:spring-boot-starter-data-mongodb (>=1.1.11.release, <=1.1.12.release), org.springframework.data:spring-data-mongodb-cross-store (1.5.5.release) +6 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.5.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

com.kurento.kmf:kmf-content-api (>=3.0.5, <=4.3.1), com.kurento.kmf:kmf-repository-api (4.3.1) +4 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.5.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.kurento.kmf:kmf-content-api =3.0.5, =5.0.3, =1.0.3.release,...

org.grails:gorm-mongodb-spring-boot (1.1.0.release), org.springframework.boot:spring-boot-starter-data-mongodb (>=1.1.0.release, <=1.1.3.release) +4 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.5.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:gorm-mongodb-spring-boot 1.1.0.release -...

org.craftercms:crafter-social (2.3.6), org.grails:gorm-mongodb-spring-boot (>=1.0.0.rc2, <=1.0.0.release) +7 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.craftercms:crafter-social 2.3.6 -...

in.clouthink.daas:daas-token (>=1.0.0, <=1.8.1), io.github.jhipster.loaded:agent (>=0.5, <=0.12) +7 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - in.clouthink.daas:daas-token =1.0.0, =0.5, =0.5, =0.5, =0.5,...

org.grails:gorm-mongodb-spring-boot (1.0.0.m1), org.grails:grails-datastore-gorm-mongodb (>=2.0.0.release, <=2.0.1.release) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:gorm-mongodb-spring-boot 1.0.0.m1 -...

org.springframework.boot:spring-boot-starter-data-mongodb (1.4.4.release), org.springframework.data:spring-data-mongodb-cross-store (1.9.7.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.7.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.boot:spring-boot-starter-data-mongodb (1.3.8.release), org.springframework.data:spring-data-mongodb-cross-store (1.8.5.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.8.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

com.bushidowallet:bushido-address-watcher (1.0.3), com.bushidowallet:bushido-wallet-service (1.0.3) +8 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.8.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bushidowallet:bushido-address-watcher 1.0.3 -...

com.antheminc.oss:nimbus-core (>=1.1.7, <=1.2.0), com.antheminc.oss:nimbus-entity-dsl (>=1.1.7, <=1.2.0) +10 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.12.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.antheminc.oss:nimbus-core =1.1.7, =1.1.7, =1.1.7, =1.1.7,...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-40988 Source advisory: GHSA-M69X-PW9P-7J3Q...

com.epages:restdocs-api-spec-restassured (>=0.11.2, <=0.16.4), org.springframework.boot:spring-boot-docs (>=2.0.0.release, <=2.1.18.release) +1 more potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-restassured (>=2.0.0.release, <=2.0.5.release)

org.springframework.restdocs:spring-restdocs-restassured MAVEN version =2.0.0.release, =0.11.2, =2.0.0.release, =2.0.0, =2.2.1 Source cves: CVE-2026-40991 Source advisory: OSV:GHSA-6RPQ-6VV2-5222...

com.github.softbasic:micro-core (>=0.0.1, <=0.0.6), org.springframework.boot:spring-boot-starter-data-mongodb (2.0.7.release) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.12.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.softbasic:micro-core =0.0.1, =2.0.4.release,...

com.antelopesystem.crudframework:crud-framework-mongo-connector (>=0.1.0, <=0.5.0), com.antelopesystem.crudframework:crud-framework-utils (>=0.1.1, <=0.5.0) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.antelopesystem.crudframework:crud-framework-mongo-connecto...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.15.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.14.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.14.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.5.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.5.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...