de.adorsys.multibanking:multibanking-persistence-mongodb (>=5.5.26, <=5.5.43), de.adorsys.multibanking:multibanking-server (>=5.5.26, <=5.5.43) +7 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.21.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.adorsys.multibanking:multibanking-persistence-mongodb...

org.resthub:resthub-mongodb (2.1.2), org.springframework.data:spring-data-mongodb-cross-store (1.2.2.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.resthub:resthub-mongodb 2.1.2 -...

com.github.mikeqian:sales-common (1.1.13), com.sangupta:urn (0.1.0) +11 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.8.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.mikeqian:sales-common 1.1.13 - com.sangupta:urn 0.1....

com.breuninger.boot:example-app (>=3.1.1.release, <=3.2.1.release), com.codingapi:codingapi-test (0.0.2) +34 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.breuninger.boot:example-app =3.1.1.release, =1.0.3, =1.0.20...

de.bwaldvogel:mongo-java-server-test-common (1.34.0), io.holunda.taskpool:camunda-bpm-taskpool-view-mongo (>=2.0.7, <=2.1.2) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.bwaldvogel:mongo-java-server-test-common 1.34.0 -...

cn.patterncat:job-event-store-mongo (0.0.2), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.6.release) +2 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.patterncat:job-event-store-mongo 0.0.2 -...

com.github.edgarespina:mwa-mongo (>=0.1.0, <=0.1.6), com.github.edgarespina:mwa-morphia (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.0.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.edgarespina:mwa-mongo =0.1.0, =0.1.0, =2.1, =0.1.0,...

app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2326 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41711 Source advisory: OSV:GHSA-5VPF-XVV7-C8VH...

org.springframework.data:spring-data-mongodb-cross-store (1.3.1.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.3.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.github.eagle6688:devutility.external.mongo (>=2.0.6.1, <=2.0.6.4), com.github.krraghavan:mongodb-aggregate-query-support-reactive (>=0.8.0, <=0.8.4) +15 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.eagle6688:devutility.external.mongo =2.0.6.1, =0.8.0...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.15.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.15.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.18.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), cn.craccd:mongohelper (1.0.0) +272 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (>=4.4.0, <=4.4.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.4.0, =0.114.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.6.0 and more Source cves: CVE-2026-41696 Source advisory: GHSA-HC43-M36C-8V33...

com.sangupta:jerry-services (1.0.0), in.clouthink.daas:daas-bm-mongodb (>=1.0.0, <=1.0.3) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.7.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.sangupta:jerry-services 1.0.0 -...

org.springframework.data:spring-data-mongodb-cross-store (1.8.6.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.8.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.aol.microservices:micro-dbcp (>=0.79, <=0.84), com.aol.microservices:micro-hibernate (>=0.73, <=0.84) +54 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.11.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.aol.microservices:micro-dbcp =0.79, =0.73, =0.78, =0.73,...

com.ibeetl:xlsunit (>=1.0.0, <=1.0.4), com.kurento.kmf:kmf-content-api (>=3.0.5, <=4.3.1) +26 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.8.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ibeetl:xlsunit =1.0.0, =3.0.5, =1.0.4, =5.0.3, =5.0.4 -...

org.springframework.data:spring-data-mongodb-cross-store (1.5.6.release), org.springframework.integration:spring-integration-mongodb (>=4.0.8.release, <=4.0.9.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.5.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.thinkbiganalytics.kylo.plugins:kylo-hadoop-authorization-ranger (>=0.8.3, <=0.9.1), com.thinkbiganalytics.kylo.plugins:kylo-ranger-rest-client (>=0.8.3, <=0.9.1) +33 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.12.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: -...

com.basicfu:system (1.0.0), com.cedarsoft:spring (>=8.4.0, <=8.7.0) +175 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.8.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.basicfu:system 1.0.0 - com.cedarsoft:spring =8.4.0, =4.0.0...

com.btmatthews.atlas:atlas-mongodb (1.0.0), com.github.microon:microon-services-userdirectory (0.0) +6 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.btmatthews.atlas:atlas-mongodb 1.0.0 -...