com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +21 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.5.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =4.0....

cn.springcloud.gray:spring-cloud-gray-server (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-cluster-http-synchro-plugin (>=a.2.0.0.rc1, <=a.2.0.0) +156 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.13.release)

org.springframework.security:spring-security-web MAVEN version 4.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - cn.springcloud.gray:spring-cloud-gray-server =a.1.1.1,...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +5 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.14.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1,...

com.github.iaunzu:strqlbuilder (>=1.1.0, <=1.1.1), com.github.osvaldopina:linkbuilder (>=0.1.1, <=0.3.0) +58 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.9.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.9.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.iaunzu:strqlbuilder =1.1.0, =0.1.1, =1.0.5, =0.8.5,...

org.springframework.amqp:spring-rabbit (1.3.8.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.3.8.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.3.8.release Source cves: CVE-2026-4170...

com.portlandwebworks:pww-commons (>=1.0, <=1.0.2), de.itsvs:cwtrpc-security (0.9.0) +12 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.0.6.release)

org.springframework.security:spring-security-web MAVEN version 3.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.portlandwebworks:pww-commons =1.0, =1.0.2 -...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +488 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=4.0.0, <=4.3.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.0.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41717 Source advisory: GHSA-5WHC-4Q84-FJ73...

com.bushidowallet:bushido-address-watcher (1.0.3), com.bushidowallet:bushido-wallet-service (1.0.3) +89 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.5.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bushidowallet:bushido-address-watcher 1.0.3 -...

com.github.jchanghong:test (2.2.6), com.github.jchanghong:utils (2.2.6) +2 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.6.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.github.jchanghong:test 2.2.6 -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.1, <=2.5), com.github.vencent-lu:giants-cache-redis (>=1.0.4, <=1.0.5-beta-7) +80 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.1, =1.0.4, =2.2.1...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +10 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.0.2.release)

org.springframework.security:spring-security-web MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

africa.absa:inception-codes (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +11403 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=2.0.0.release, <=2.7.18)

org.springframework.data:spring-data-commons MAVEN version =2.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2026-41711 Source advisory: GHSA-5VPF-XVV7-C8VH...

com.epages:restdocs-api-spec-webtestclient (>=0.17.1, <=0.19.4), com.jiangtj.platform:micro-test-cloud (>=0.0.6, <=0.0.10) +3 more potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-webtestclient (>=3.0.0, <=3.0.5)

org.springframework.restdocs:spring-restdocs-webtestclient MAVEN version =3.0.0, =0.17.1, =0.0.6, =1.0.0, =1.3.10, =1.2.4, =1.4.1 Source cves: CVE-2026-40991 Source advisory: GHSA-6RPQ-6VV2-5222...

com.github.lodsve:lodsve-mongodb (>=2.4.8, <=2.5.10), com.lodsve:lodsve-mongodb (>=2.6.0-release, <=2.7.1-release) +7 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.6.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.lodsve:lodsve-mongodb =2.4.8, =2.6.0-release,...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), cn.craccd:mongohelper (1.0.0) +272 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=4.4.0, <=4.4.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.4.0, =0.114.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.6.0 and more Source cves: CVE-2026-41717 Source advisory: OSV:GHSA-5WHC-4Q84-FJ73...

com.4dconcept.springframework.data:spring-data-marklogic (>=1.2.2.release, <=1.3.5.release), com.foreach.imageserver:imageserver-admin (5.0.0.release) +76 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.17.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.4dconcept.springframework.data:spring-data-marklogic...

com.github.leleuj.springframework.security:spring-security-oauth-client (>=1.0.0, <=1.1.0), com.github.lltyk:tapestry-spring-security (>=3.0.4, <=3.0.5) +72 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.1.0.release)

org.springframework.security:spring-security-web MAVEN version 3.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

com.bluelock:camel-spring-amqp (>=1.3, <=1.4), org.springframework.amqp:spring-rabbit (1.1.1.release) potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.1.1.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bluelock:camel-spring-amqp =1.3, =1.4 -...

GHSA-P8QJ-FJ6R-W7Q9 Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBean

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri"amqps://..." without also calling setUseSSLtrue get TLS encryption with no certificate validation and no hostname verification. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1....

org.springframework.data:spring-data-mongodb-cross-store (1.7.0.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.7.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...