CVE-2026-41716 vulnerabilities

Vulnerabilities for packages: camunda-zeebe...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Data Commons [CVE-2026-41695, CVE-2026-41711, CVE-2026-41716, CVE-2026-41721 ]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Data Commons CVE-2026-41695, CVE-2026-41711, CVE-2026-41716, CVE-2026-41721 . Spring Data Commons is used in our microservices. These vulnerabilities have been addressed. Please read the details for remediatio...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-data-commons jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41695, CVE-2026-41711, CVE-2026-41716 and CVE-2026-41721 reported for spring-data-commons-3.4.11.jar, spring-data-commons-3.5.11.jar. Vulnerability Details CVEID:CVE-2026-41695 DESCRIPTION: Spring Data Commons...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.2.28 Vulnerability Details CVEID:CVE-2026-41003 DESCRIPTION: An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.40 Vulnerability Details CVEID:CVE-2026-41003 DESCRIPTION: An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.120.0) +9212 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=3.0.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.0.0, =0.1.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41716 Source advisory:...

at.molindo:spring-data-custom (1.0.0), cn.patterncat:job-event-store-elasticsearch (0.0.2) +42 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.10.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom 1.0.0 -...

com.aol.microservices:microserver-boot (>=0.53.1, <=0.59), com.aol.microservices:microserver-core (>=0.5, <=0.59) +88 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.9.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.9.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.aol.microservices:microserver-boot =0.53.1, =0.5,...

com.github.acierto:aciertoteam-common (1.1.0), com.github.acierto:aciertoteam-geo (1.1.0) +36 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.10.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.acierto:aciertoteam-common 1.1.0 -...

am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0), am.ik.home:uaa-client (1.9.0) +316 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - am.ik.blog:blog-mapper =4.0.0, =1.0.2.release, =1.2.0-alpha3,...

fr.zebasto.dailymotion:dailymotion-sdk-client (1.0.0), fr.zebasto:dailymotion-sdk-client (1.0.1) +38 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.6.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.6.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - fr.zebasto.dailymotion:dailymotion-sdk-client 1.0.0 -...

com.btmatthews.atlas:atlas-mongodb (1.0.0), com.github.microon:microon-services-userdirectory (0.0) +18 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.5.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.btmatthews.atlas:atlas-mongodb 1.0.0 -...

com.basicfu:system (1.0.0), com.cedarsoft:spring (>=8.4.0, <=8.7.0) +175 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.8.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.basicfu:system 1.0.0 - com.cedarsoft:spring =8.4.0, =4.0.0...

com.github.darrachequesne:spring-data-jpa-datatables (>=1.0, <=2.6), com.github.lodsve:lodsve-mongodb (>=2.4.8, <=2.5.10) +61 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.10.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.10.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.darrachequesne:spring-data-jpa-datatables =1.0,...

at.molindo:spring-data-custom (>=0.0.1, <=0.0.2), au.com.mountain-pass:hyperstate (>=1, <=3) +84 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.11.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom =0.0.1, =1, =1.4, =1.4, =0.0.7,...

ch.sharedvd.tipi:tipi-engine (>=1.0.5, <=1.1.9), cn.easyproject:easyshiro-redis-cache (2.6.0-release) +184 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.9.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ch.sharedvd.tipi:tipi-engine =1.0.5, =1.0.0-release,...

com.ganshane.lichen:lichen-activiti (>=0.5.9, <=0.5.10.2), com.ganshane.lichen:lichen-creeper (>=0.5.9, <=0.5.10.2) +63 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.8.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ganshane.lichen:lichen-activiti =0.5.9, =0.5.9, =0.5.9,...

am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +110 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =1.0.1, =3.0.1.3...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (1.0.4), org.dspace:dspace-spring-rest (7.0-preview-1) +30 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.7.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: -...

in.clouthink.daas:daas-bm-core (>=1.0.0, <=1.0.3), in.clouthink.daas:daas-bm-mongodb (>=1.0.0, <=1.0.3) +28 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.7.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - in.clouthink.daas:daas-bm-core =1.0.0, =1.0.0, =3.0.1, =1.0.0,...