au.com.mountain-pass:hyperstate (>=4, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +291 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.11.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.9.0-alpha, =0.9.0-alpha...

com.sangupta:jerry-services (1.0.0), in.clouthink.daas:daas-bm-mongodb (>=1.0.0, <=1.0.3) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.7.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.sangupta:jerry-services 1.0.0 -...

de.adorsys.psd2:aspsp-mock-server (>=1.13, <=3.0), net.jworkflow:jworkflow.providers.mongodb (1.0) +4 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.17.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.adorsys.psd2:aspsp-mock-server =1.13, =3.0 -...

am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +110 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =1.0.1, =3.0.1.3...

com.avides.springboot.springtainer:springtainer-mongodb (1.0.0), com.avides.springboot.testcontainer:springboot-testcontainer-mongodb (1.0.0-rc2) +19 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.avides.springboot.springtainer:springtainer-mongodb 1.0.0 -...

com.lordofthejars:nosqlunit-mongodb (>=0.9.0, <=1.0.0), org.grails:grails-datastore-gorm-mongodb (>=3.0.2.release, <=3.1.5.release) +9 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.7.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.lordofthejars:nosqlunit-mongodb =0.9.0, =3.0.2.release,...

at.molindo:spring-data-custom (1.0.0), cn.patterncat:job-event-store-elasticsearch (0.0.2) +42 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.10.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom 1.0.0 -...

ch.sahits.game:openpatriciantest (>=0.9.1-rc1, <=0.9.1), cn.minsin:mutils-data-mongodb (>=0.0.2.release, <=0.4.0.release) +14 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =0.9.1-rc1, =0.0.2.release,...

com.highway2urhell:h2hell-web (>=1.0.1, <=1.0.5), io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.beta6, <=1.1.0.cr1) +24 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.7.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.highway2urhell:h2hell-web =1.0.1, =1.1.0.beta6, =1.1.0.beta...

com.epam.reportportal:commons-dao (3.0.0), com.epam.reportportal:commons-rules (3.0.0) +185 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-dao 3.0.0 -...

org.grails:grails-datastore-gorm-mongo (>=1.0.0.rc5, <=1.0.0.release), org.grails:grails-datastore-mongo (>=1.0.0.rc5, <=1.0.0.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.0.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:grails-datastore-gorm-mongo =1.0.0.rc5, =1.0.0.rc5,...

com.airlenet:play-repo-mongo (2.0.0), com.bol:spring-data-mongodb-encrypt (>=1.0, <=1.3.0) +190 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.airlenet:play-repo-mongo 2.0.0 -...

com.capitalone.dashboard:api (>=1.5.0, <=3.2.9), com.capitalone.dashboard:api-audit (>=3.1.0, <=3.4.2) +34 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.8.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.capitalone.dashboard:api =1.5.0, =3.1.0, =2.0.4, =2.0.2,...

org.activiti.cloud.messages:activiti-cloud-starter-messages-mongodb (7.1.0.m6), org.springframework.boot:spring-boot-starter-data-mongodb (2.1.12.release) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.15.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2326 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41716 Source advisory: OSV:GHSA-9FW2-H3HF-293R...

com.assist4j:assist4j-dao (>=1.0.0, <=1.1.30), com.assist4j:assist4j-data (>=1.0.0, <=1.1.30) +20 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.assist4j:assist4j-dao =1.0.0, =1.0.0, =4.0.0, =4.0.0,...

org.resthub:resthub-mongodb (2.1.3), org.springframework.data:spring-data-mongodb-cross-store (1.2.4.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.2.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.resthub:resthub-mongodb 2.1.3 -...

io.gravitee.gateway.standalone:gravitee-gateway-standalone-container (>=0.2.0, <=0.7.0), io.gravitee.gateway.standalone:gravitee-gateway-standalone-distribution (>=0.2.0, <=0.7.0) +12 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.7.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

com.arhs-group:spring-cache-mongodb (>=1.0.0, <=1.0.1), com.bq.corbel.lib:mongodb (0.9.0) +36 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.arhs-group:spring-cache-mongodb =1.0.0, =1.0.1 -...

com.sksamuel.elasticsearch:elasticsearch-river-neo4j (>=0.90.7.0, <=0.90.9.0), org.springframework.data:spring-cql (1.3.6.release) +15 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.11.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.sksamuel.elasticsearch:elasticsearch-river-neo4j =0.90.7.0...