com.gitee.zodiacstack:zodiac-mongo (>=1.2.11, <=1.6.8), com.gitee.zodiacstack:zodiac-mongo-spring-boot-starter (>=1.2.11, <=1.6.8) +14 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.12.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.gitee.zodiacstack:zodiac-mongo =1.2.11, =1.2.11,...

org.springframework.data:spring-data-mongodb-cross-store (1.5.6.release), org.springframework.integration:spring-integration-mongodb (>=4.0.8.release, <=4.0.9.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.5.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.lordofthejars:nosqlunit-mongodb (>=0.7.5, <=0.8.1), org.inigma.shared:inigma-mongo (>=0.4, <=0.6) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.1.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.lordofthejars:nosqlunit-mongodb =0.7.5, =0.4, =0.2,...

cn.dyaoming.common:common-cache (0.0.2), com.github.fosin:cdp-core (1.0.0.release) +100 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.15.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - cn.dyaoming.common:common-cache 0.0.2 -...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +3273 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=3.3.0, <=3.3.13)

org.springframework.data:spring-data-commons MAVEN version =3.3.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41716 Source advisory: OSV:GHSA-9FW2-H3HF-293R...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), ai.intelliswarm:swarmai-core (>=1.0.0, <=1.0.29) +3360 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-commons MAVEN version =3.4.0, =0.114.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =3.3.0, =0.5.8, =0.0.1, =0.0.1, =0.0.2 - be.jidoka:jdk-keycloak-admin 2.5.0 and more Source cves: CVE-2026-41711 Source advisory:...

com.soterianetworks:spase-audit (>=0.9.27, <=0.9.59), org.resthub:resthub-common (2.1.3) +12 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.5.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.5.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.soterianetworks:spase-audit =0.9.27, =0.9.59 -...

org.springframework.data:spring-data-mongodb-cross-store (1.9.9.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.efindi:smo-filter (0.0.1-release), org.springframework.data:spring-data-mongodb-cross-store (2.0.2.release) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.efindi:smo-filter 0.0.1-release -...

in.clouthink.daas:daas-token (>=1.0.0, <=1.8.1), io.github.jhipster.loaded:agent (>=0.5, <=0.12) +7 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - in.clouthink.daas:daas-token =1.0.0, =0.5, =0.5, =0.5, =0.5,...

com.ganshane.lichen:lichen-activiti (>=0.5.9, <=0.5.10.2), com.ganshane.lichen:lichen-creeper (>=0.5.9, <=0.5.10.2) +63 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.8.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ganshane.lichen:lichen-activiti =0.5.9, =0.5.9, =0.5.9,...

com.github.jknack:mwa-mongo (0.4.0), com.github.jknack:mwa-morphia (0.4.0) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo 0.4.0 - com.github.jknack:mwa-morph...

am.ik.blog:blog-mapper (>=4.4.1, <=4.5.0), cn.ibaijia:jsm-frame (1.3.24) +414 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.7.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - am.ik.blog:blog-mapper =4.4.1, =1.0.0, =1.0.10, =6.6.667,...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), cn.bbwres:biscuit-mongodb-boot-starter (>=3.0.0, <=3.0.2) +251 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=4.5.0, <=4.5.11)

org.springframework.data:spring-data-mongodb MAVEN version =4.5.0, =1.0.0.ee-20260424025040, =3.0.0, =3.5.0.0, =3.5.5.3, =3.5.5.3, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.5.2 and more Source cves: CVE-2026-41717 Source advisory:...

com.github.spt-oss:spring-boot-starter-data-jpa-plus (>=0.1.0, <=0.2.0), com.hotels:circus-train (>=11.0.0, <=16.4.0) +39 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.11.5.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.spt-oss:spring-boot-starter-data-jpa-plus =0.1.0,...

com.2oi7:file-uploader (1.0.0), com.antheminc.oss:nimbus-starter (>=1.3.0.m1, <=1.3.2.m1) +20 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.2oi7:file-uploader 1.0.0 - com.antheminc.oss:nimbus-starte...

com.eworkcloud:ework-cloud-starter-mongo (>=1.5.6, <=1.8.6), org.springframework.boot:spring-boot-starter-data-mongodb (1.5.20.release) +1 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.20.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.eworkcloud:ework-cloud-starter-mongo =1.5.6, =1.8.6 -...

co.aurasphere.botmill:botmill-core (>=1.0.0, <=1.0.2), co.aurasphere.botmill:fb-botmill (>=2.0.0-rc1, <=2.0.0-rc3) +30 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.5.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - co.aurasphere.botmill:botmill-core =1.0.0, =2.0.0-rc1, =1.1,...

com.buession.cas:buession-cas-metrics (>=1.1.1, <=1.1.2), com.buession.springboot:buession-springboot-mongodb (>=1.1.1, <=1.1.2) +33 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.buession.cas:buession-cas-metrics =1.1.1, =1.1.1, =2.0.4,...

cloud.altemista.fwk.persistence:cloud-altemistafwk-core-persistence-mongodb-conf (>=3.0.0.release, <=3.0.1.release), com.github.paulcwarren:content-mongo-spring-boot-starter (>=0.3.0, <=0.4.0) +18 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...