io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.cr2, <=1.1.0.cr3), io.fabric8:process-spring-boot-itests-service-invoicing (>=1.1.0.cr2, <=1.1.0.cr5) +2 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.1.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing =1.1.0.cr2,...

org.springframework.data:spring-data-rest-hal-browser (2.5.4.release), org.springframework.data:spring-data-rest-webmvc (2.5.4.release) potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.5.4.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...

org.springframework.data:spring-data-rest-webmvc (2.2.0.release) potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.2.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

com.github.pscosta:kafka-proto-api (1.0), org.apereo.cas:cas-server-core-configuration-cloud-kafka (5.2.0-rc4) +1 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.2.3.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.pscosta:kafka-proto-api 1.0 -...

org.springframework.data:spring-data-rest-webmvc (2.2.0.release) potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.2.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

at.molindo:spring-data-custom (>=0.0.1, <=0.0.2), au.com.mountain-pass:hyperstate (>=1, <=3) +84 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom =0.0.1, =1, =1.4, =1.4, =0.0.7,...

com.github.zhycn:xbird-starter-swagger2 (>=1.0.0, <=1.3.0), com.heapbrain:testdeed (>=1.2.6, <=1.3.2) +11 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.6.9.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.zhycn:xbird-starter-swagger2 =1.0.0, =1.2.6,...

ai.apiverse:apipulse (1.0.1), app.commerce-io:spring-boot-starter-data-search-jpa (>=1.1.0-rc1, <=1.3.0) +385 more potentially affected by CVE-2026-41730 via org.springframework.data:spring-data-rest-core (>=3.0.0.release, <=3.7.18)

org.springframework.data:spring-data-rest-core MAVEN version =3.0.0.release, =1.1.0-rc1, =1.0.1.release, =1.0.0.release, =1.0.1.release, =1.1.8.release, =1.1.5.release, =1.0.0, =1.4.0, =1.6.0 - co.bittub.api:core 1.0.0 - com.9isuper.pelecanus:pelecanus-data-jpa 1.0.3.m1 -...

am.ik.home:uaa-server (1.9.0), com.github.ddewaele:springboot.crud.sample (0.0.10) +3 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.6.1.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - am.ik.home:uaa-server 1.9.0 -...

io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.11), io.github.shuigedeng:taotao-boot-starter-mq-pulsar (>=2025.02, <=2025.11) +7 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=1.2.0, <=1.2.17)

org.springframework.pulsar:spring-pulsar MAVEN version =1.2.0, =2025.02, =2025.02, =2025.02, =2025.02, =3.4.0, =3.4.0, =4.2.2, =1.2.0, =1.2.0, =1.2.17 Source cves: CVE-2026-41732 Source advisory: GHSA-GG69-9WWP-6JX2...

org.springframework.data:spring-data-rest-webmvc (2.3.2.release) potentially affected by CVE-2026-41728 via org.springframework.data:spring-data-rest-core (2.3.2.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

com.ibeetl:xlsunit (>=1.0.0, <=1.0.4), com.kurento.kmf:kmf-content-api (>=3.0.5, <=4.3.1) +26 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.8.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ibeetl:xlsunit =1.0.0, =3.0.5, =1.0.4, =5.0.3, =5.0.4 -...

io.github.divinespear:jpa-schema-gradle-plugin (>=0.1.7-1, <=0.1.10), io.github.jhipster.loaded:agent (>=0.2, <=0.12) +15 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.7.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - io.github.divinespear:jpa-schema-gradle-plugin =0.1.7-1, =0.2,...

cn.dyaoming.common:common-cache (0.0.2), cn.ocoop.framework:shiro-spring-boot-autoconfigure (1.0.1) +42 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.4.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.dyaoming.common:common-cache 0.0.2 -...

com.cjoop:platform-core (0.0.1.release), com.cjoop:platform-security (0.0.1.release) +91 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.11.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.cjoop:platform-core 0.0.1.release -...

com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (>=1.2.0, <=1.4.0), com.contentgrid.spring:contentgrid-automations-rest (>=0.15.0, <=0.17.0) +61 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (>=4.3.0, <=4.3.13)

org.springframework.data:spring-data-rest-core MAVEN version =4.3.0, =1.2.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =3.0.11, =3.0.11, =3.0.11, =2.0.0, =2.0.4 and more Source cves: CVE-2026-41729 Source advisory: GHSA-J388-8RM5-P97Fhttps://vulners.com/g...

com.genxiaogu:rate-limiter-spring-boot-starter (>=1.0.0, <=2.0.1), com.github.qiujiayu:autoload-cache-spring-boot-starter (>=1.1.0, <=6.6) +10 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.5.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.genxiaogu:rate-limiter-spring-boot-starter =1.0.0, =1.1.0...

io.github.shuigedeng:taotao-boot-demo (2025.12), io.github.shuigedeng:taotao-boot-starter-mq-pulsar (>=2025.12, <=2026.06) +23 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (>=2.0.0, <=2.0.5)

org.springframework.pulsar:spring-pulsar MAVEN version =2.0.0, =2025.12, =2025.12, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.0, =1.0.0, =1.0.0, =1.0.2, =1.0.2, =1.4.5 and more Source cves: CVE-2026-41732 Source advisory: GHSA-GG69-9WWP-6JX2...

org.springframework.data:spring-data-rest-webmvc (2.3.0.release) potentially affected by CVE-2026-41728 via org.springframework.data:spring-data-rest-core (2.3.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

edu.asu.diging:giles-eco-requests (>=0.8, <=0.16), org.apereo.cas:cas-server-core-configuration-cloud-kafka (5.1.0-rc1) +98 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.1.1.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - edu.asu.diging:giles-eco-requests =0.8, =0.16 -...