com.sangupta:jerry-services (1.0.0), in.clouthink.daas:daas-bm-mongodb (>=1.0.0, <=1.0.3) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.7.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.sangupta:jerry-services 1.0.0 -...

be.appify.prefab:prefab-annotation-processor (>=0.7.0, <=0.10.9), be.appify.prefab:prefab-mongodb (>=0.5.0, <=0.10.9) +123 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (>=5.0.0, <=5.0.5)

org.springframework.data:spring-data-mongodb MAVEN version =5.0.0, =0.7.0, =0.5.0, =0.5.0, =4.0.0.0-m2, =4.0.0.0-m2, =1.0.1, =1.0.1, =3.0.0, =4.0.0, =4.3.1, =0.0.1, =0.0.2, =0.0.2, =1.0.4 - com.mzinx:mongodb-spring-materialized-view 1.0.0 and more Source cves: CVE-2026-41696 Source advisory:...

com.capitalone.dashboard:hygieia-common (>=4.0.1, <=4.1.0), com.eworkcloud.starter:ework-cloud-starter-mongo (>=2.1.7, <=2.2.2) +11 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.capitalone.dashboard:hygieia-common =4.0.1, =2.1.7, =1.30.0...

com.capitalone.dashboard:api (>=1.5.0, <=3.2.9), com.capitalone.dashboard:api-audit (>=3.1.0, <=3.4.2) +34 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.8.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.capitalone.dashboard:api =1.5.0, =3.1.0, =2.0.4, =2.0.2,...

io.gravitee.gateway.standalone:gravitee-gateway-standalone-container (>=0.2.0, <=0.7.0), io.gravitee.gateway.standalone:gravitee-gateway-standalone-distribution (>=0.2.0, <=0.7.0) +12 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.7.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

be.appify.prefab:prefab-annotation-processor (>=0.7.0, <=0.10.9), be.appify.prefab:prefab-mongodb (>=0.5.0, <=0.10.9) +123 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=5.0.0, <=5.0.5)

org.springframework.data:spring-data-mongodb MAVEN version =5.0.0, =0.7.0, =0.5.0, =0.5.0, =4.0.0.0-m2, =4.0.0.0-m2, =1.0.1, =1.0.1, =3.0.0, =4.0.0, =4.3.1, =0.0.1, =0.0.2, =0.0.2, =1.0.4 - com.mzinx:mongodb-spring-materialized-view 1.0.0 and more Source cves: CVE-2026-41717 Source advisory:...

org.sentilo.agent:sentilo-agent-activity-monitor (1.7.0), org.sentilo.agent:sentilo-agent-alert (1.7.0) +4 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.3.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.sentilo.agent:sentilo-agent-activity-monitor 1.7.0 -...

GHSA-8R2H-XH92-GQ57 Spring Data Relational: Attackers can supply wildcard characters to perform boolean-based blind data inference

Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher STARTING, ENDING, or CONTAINING in Query By Example QBE. An attacker can supply wildcard characters to perform boolean-based blind data inference. Affected versions: Spring Data...

org.craftercms:crafter-social (2.3.6), org.grails:gorm-mongodb-spring-boot (>=1.0.0.rc2, <=1.0.0.release) +7 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.craftercms:crafter-social 2.3.6 -...

com.sharethis:mongomigration (1.0.0), org.resthub:resthub-mongodb (>=2.1.4, <=2.1.6) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.3.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.sharethis:mongomigration 1.0.0 - org.resthub:resthub-mongod...

io.rhiot:rhiot-cloudlet-geofencing (0.1.1), io.rhiot:rhiot-iot-cloudlet-document-default (0.1.1) +4 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.6.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - io.rhiot:rhiot-cloudlet-geofencing 0.1.1 -...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.persistence:cloud-altemistafwk-core-persistence-mongodb-conf (3.1.0.release) +53 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cloud.altemista.fwk.framework:cloud-altemistafwk-documentation...

org.springframework.data:spring-data-mongodb-cross-store (1.9.4.release), org.springframework.session:spring-session-data-mongo (>=1.3.0.release, <=1.3.3.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.inigma.shared:inigma-shared (0.1), org.springframework.data:spring-data-mongodb-cross-store (1.0.4.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.0.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.inigma.shared:inigma-shared 0.1 -...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +21 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.5.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =4.0....

org.inigma.shared:inigma-shared (0.1), org.springframework.data:spring-data-mongodb-cross-store (1.0.4.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.0.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.inigma.shared:inigma-shared 0.1 -...

org.resthub:resthub-mongodb (2.1.3), org.springframework.data:spring-data-mongodb-cross-store (1.2.4.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.2.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.resthub:resthub-mongodb 2.1.3 -...

org.springframework.data:spring-data-mongodb-cross-store (1.3.1.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.3.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.thinkbiganalytics.kylo.plugins:kylo-hadoop-authorization-ranger (>=0.8.3, <=0.9.1), com.thinkbiganalytics.kylo.plugins:kylo-ranger-rest-client (>=0.8.3, <=0.9.1) +33 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: -...

com.github.fangyanpg:spring-boot-ratelimiter (>=0.0.1-release, <=0.3.0-release), com.github.hushengte:disciples-feed (1.0.10) +53 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.22.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.fangyanpg:spring-boot-ratelimiter =0.0.1-release,...