org.springframework.data:spring-data-redis (1.7.9.release) potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.9.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - org.springframework.data:spring-data-redis 1.7.9.release Sour...

com.github.upers:betexdao (>=1.0.0, <=1.2.7), com.nepxion:discovery-common-redis (>=edgware.1.0.0, <=3.14.0) +13 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.17.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.github.upers:betexdao =1.0.0, =edgware.1.0.0,...

com.chaoxing:redis-distribute-lock-spring-boot-starter (1.0.0), com.codingapi:sds-delivery (2.0.2) +45 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.10.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.chaoxing:redis-distribute-lock-spring-boot-starter 1.0.0...

com.github.surpassm:liaoin-security-app (0.0.1.release), com.github.surpassm:liaoin-security-core (0.0.1.release) +11 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.14.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.github.surpassm:liaoin-security-app 0.0.1.release -...

be.ordina:microservices-dashboard-server (1.0.1), cn.m1c.lannie:m1c-lannie-common (>=1.0.0-release, <=1.0.6.6-release) +21 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.2.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - be.ordina:microservices-dashboard-server 1.0.1 -...

cn.easyproject:easyshiro-redis-cache (2.6.0-release), com.acmtc:acmtc-redismq (>=1.0.0-release, <=1.0.1-release) +49 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.9.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.easyproject:easyshiro-redis-cache 2.6.0-release -...

cn.net.vidyo:jsmth-data (3.3.120.release), com.github.vencent-lu:giants-cache-redis (>=1.0.4, <=1.0.5-beta-7) +4 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.4.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.net.vidyo:jsmth-data 3.3.120.release -...

com.wueasy:wueasy-base-web (>=1.2.0, <=1.3.3), com.wueasy:wueasy-gateway (>=1.4.0, <=1.4.2) +11 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.18.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.wueasy:wueasy-base-web =1.2.0, =1.4.0, =1.3.0,...

CVE-2026-41719

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through...

VMware Spring Data KeyValue和VMware Spring Data Redis 安全漏洞

VMware Spring Data KeyValue and VMware Spring Data Redis are both products of the American company VMware. VMware Spring Data KeyValue is a key-value storage data access framework. VMware Spring Data Redis is a Redis data access framework. Both VMware Spring Data KeyValue and VMware Spring Data...

CVE-2026-41719: Improper Neutralization of Special Elements used in an Expression Language Statement

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through...

PT-2026-76013

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through...

CVE-2026-41719 Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through...

CVE-2026-41719 Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through...

CVE-2026-41719

Technical details about CVE-2026-41719 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, vectors, or fixes are provided here.

CVE-2026-41719 Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through...

cc.alans.netty-plus:netty-plus (1.0.0), cc.uncarbon.framework:helio-starter-rate-limit-redis (>=2.3.0, <=2.4.1) +820 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-keyvalue MAVEN version =3.4.0, =2.3.0, =2.3.0, =2.3.0, =0.0.1, =1.7.0.v3, =5.0.5, =3.2.5, =4.1.3 and more Source cves: CVE-2026-41719 Source advisory: MEND:CVE-2026-41719...

ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-agentic-factory (>=1.2.4, <=1.2.6) +1035 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-keyvalue MAVEN version =3.5.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - cc.uncarbon.framework:helio-starter-rate-limit-redis 2.5.0 - cc.uncarbon.framework:helio-starter-redis 2.5...

CVE-2026-41719

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through...

PT-2026-48320

Name of the Vulnerable Software and Affected Versions Spring Data KeyValue / Spring Data Redis versions 4.0.0 through 4.0.5 Spring Data KeyValue / Spring Data Redis versions 3.5.0 through 3.5.11 Spring Data KeyValue / Spring Data Redis versions 3.4.0 through 3.4.14 Spring Data KeyValue / Spring...