org.springframework.boot:spring-boot-starter-data-mongodb (1.5.5.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.5.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.bitbucket.swattu:datastore-utils (>=4.0.32, <=4.0.63), org.bitbucket.swattu:lock-utils (>=4.0.32, <=4.0.63) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.bitbucket.swattu:datastore-utils =4.0.32, =4.0.32,...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.17.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.16.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.16.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

de.adorsys.psd2:aspsp-mock-server (>=1.13, <=3.0), net.jworkflow:jworkflow.providers.mongodb (1.0) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.17.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.adorsys.psd2:aspsp-mock-server =1.13, =3.0 -...

in.clouthink.daas:daas-fss-gridfs (>=3.0.5, <=3.0.7), org.springframework.boot:spring-boot-starter-data-mongodb (1.5.19.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.18.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - in.clouthink.daas:daas-fss-gridfs =3.0.5, =1.2.13.release,...

com.eworkcloud:ework-cloud-starter-mongo (>=1.5.6, <=1.8.6), org.springframework.boot:spring-boot-starter-data-mongodb (1.5.20.release) +1 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.20.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.eworkcloud:ework-cloud-starter-mongo =1.5.6, =1.8.6 -...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.21.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.22.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.22.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.11.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.11.release) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.14.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.14.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.14.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.17.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.15.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.15.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.18.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

de.adorsys.multibanking:multibanking-persistence-mongodb (>=5.5.26, <=5.5.43), de.adorsys.multibanking:multibanking-server (>=5.5.26, <=5.5.43) +7 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.21.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.adorsys.multibanking:multibanking-persistence-mongodb...

de.bwaldvogel:mongo-java-server-test-common (1.34.0), io.holunda.taskpool:camunda-bpm-taskpool-view-mongo (>=2.0.7, <=2.1.2) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.bwaldvogel:mongo-java-server-test-common 1.34.0 -...

com.github.shoothzj:sdk-distribute-impl-mongo (3.0.27.release), de.bwaldvogel:mongo-java-server-test-common (>=1.35.0, <=1.36.0) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.shoothzj:sdk-distribute-impl-mongo 3.0.27.release -...

cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2), io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.6.4, <=5.7.0) +8 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.13.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp 1.0.2 -...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +5 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.14.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1,...

org.springframework.boot:spring-boot-starter-data-elasticsearch (>=1.1.11.release, <=1.1.12.release), org.springframework.boot:spring-boot-starter-data-jpa (>=1.1.11.release, <=1.1.12.release) +22 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.8.5.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.boot:spring-boot-starter-data-elasticsearch...

com.aol.microservices:microserver-boot (>=0.53.1, <=0.59), com.aol.microservices:microserver-core (>=0.5, <=0.59) +88 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.9.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.9.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.aol.microservices:microserver-boot =0.53.1, =0.5,...

com.github.g-chenning:jdbc-yml-quick (0.0.6-release), io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.5.2, <=5.6.0) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.11.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.g-chenning:jdbc-yml-quick 0.0.6-release -...

org.springframework.amqp:spring-rabbit (1.2.1.release), org.springframework.boot:spring-boot-starter-amqp (>=1.0.0.release, <=1.0.1.release) potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.2.1.release)

org.springframework.amqp:spring-amqp MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.2.1.release -...

cc.voox:publisher (0.1.2.ga), org.springframework.amqp:spring-rabbit (1.2.2.release) +2 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.2.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - cc.voox:publisher 0.1.2.ga - org.springframework.amqp:spring-rabbit 1.2.2.relea...