com.lordofthejars:nosqlunit-mongodb (>=0.7.5, <=0.8.1), org.inigma.shared:inigma-mongo (>=0.4, <=0.6) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.1.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.lordofthejars:nosqlunit-mongodb =0.7.5, =0.4, =0.2,...

com.buession.cas:buession-cas-metrics (>=1.1.1, <=1.1.2), com.buession.springboot:buession-springboot-mongodb (>=1.1.1, <=1.1.2) +33 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.buession.cas:buession-cas-metrics =1.1.1, =1.1.1, =2.0.4,...

africa.absa:inception-codes (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +11403 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=2.0.0.release, <=2.7.18)

org.springframework.data:spring-data-commons MAVEN version =2.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2026-41711 Source advisory: GHSA-5VPF-XVV7-C8VH...

com.github.lkqm:spring-data-mongodb-extends (0.1.0), io.flamingock:mongodb-springdata-v2-driver (>=0.0.10-beta, <=0.0.32-beta) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.lkqm:spring-data-mongodb-extends 0.1.0 -...

com.aol.microservices:microserver-boot (>=0.53.1, <=0.59), com.aol.microservices:microserver-core (>=0.5, <=0.59) +88 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.9.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.9.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.aol.microservices:microserver-boot =0.53.1, =0.5,...

de.bwaldvogel:mongo-java-server-test-common (1.34.0), io.holunda.taskpool:camunda-bpm-taskpool-view-mongo (>=2.0.7, <=2.1.2) +4 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.bwaldvogel:mongo-java-server-test-common 1.34.0 -...

com.capitalone.dashboard:api (>=3.3.0, <=3.4.52), com.capitalone.dashboard:api-audit (>=3.5.1, <=3.7.33) +15 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.23.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.capitalone.dashboard:api =3.3.0, =3.5.1, =3.2.0, =3.10.0,...

com.github.liaomengge:base-dubbo-framework (2.0.5-release), com.github.liaomengge:base-dubbo-framework-mapper (2.0.5-release) +23 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.11.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.liaomengge:base-dubbo-framework 2.0.5-release -...

org.craftercms:crafter-social (2.3.6), org.grails:gorm-mongodb-spring-boot (>=1.0.0.rc2, <=1.0.0.release) +7 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.4.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.craftercms:crafter-social 2.3.6 -...

com.thinkbiganalytics.kylo.plugins:kylo-hadoop-authorization-ranger (>=0.8.3, <=0.9.1), com.thinkbiganalytics.kylo.plugins:kylo-ranger-rest-client (>=0.8.3, <=0.9.1) +33 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.12.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: -...

com.basicfu:system (1.0.0), com.cedarsoft:spring (>=8.4.0, <=8.7.0) +175 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.8.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.basicfu:system 1.0.0 - com.cedarsoft:spring =8.4.0, =4.0.0...

com.btmatthews.atlas:atlas-mongodb (1.0.0), com.github.microon:microon-services-userdirectory (0.0) +6 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.btmatthews.atlas:atlas-mongodb 1.0.0 -...

org.springframework.data:spring-data-mongodb-cross-store (1.7.0.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.7.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.github.acierto:aciertoteam-common (1.1.0), com.github.acierto:aciertoteam-geo (1.1.0) +36 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.10.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.acierto:aciertoteam-common 1.1.0 -...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +488 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=4.0.0, <=4.3.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.0.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41717 Source advisory: OSV:GHSA-5WHC-4Q84-FJ73...

org.ozwillo.datacore:ozwillo-datacore-core (1.10.1), org.springframework.boot:spring-boot-starter-data-mongodb (1.1.5.release) +1 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.5.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.ozwillo.datacore:ozwillo-datacore-core 1.10.1 -...

de.adorsys.multibanking:multibanking-persistence-mongodb (5.5.24), de.adorsys.multibanking:multibanking-server (5.5.24) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.20.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.adorsys.multibanking:multibanking-persistence-mongodb 5.5.2...

org.gjgr.pig:pig-chivalrous-mongo (0.0.1.20201207g), org.springframework.data:spring-data-mongodb-cross-store (2.0.1.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.gjgr.pig:pig-chivalrous-mongo 0.0.1.20201207g -...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.11.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.11.release) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.14.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

in.clouthink.daas:daas-bm-core (>=1.0.0, <=1.0.3), in.clouthink.daas:daas-bm-mongodb (>=1.0.0, <=1.0.3) +28 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.7.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - in.clouthink.daas:daas-bm-core =1.0.0, =1.0.0, =3.0.1, =1.0.0,...