org.springframework.data:spring-data-mongodb-cross-store (1.8.6.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.8.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.springframework.data:spring-data-mongodb-cross-store (1.9.0.release), uk.ac.ebi.ddi:ddi-service-db (>=1.0, <=1.15.2) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.arhs-group:spring-cache-mongodb (>=1.0.0, <=1.0.1), com.bq.corbel.lib:mongodb (0.9.0) +36 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.arhs-group:spring-cache-mongodb =1.0.0, =1.0.1 -...

cn.m1c.lannie:m1c-lannie-common (>=1.0.0-release, <=1.0.6.6-release), com.airlenet:play-repo-mongo (1.0.0.release) +119 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.m1c.lannie:m1c-lannie-common =1.0.0-release, =0.0.1, =2.6.1,...

com.epam.reportportal:commons-bugtracking (2.7.0), com.epam.reportportal:commons-dao (>=2.7.0, <=2.7.1.1) +128 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking 2.7.0 -...

org.springframework.data:spring-data-mongodb-cross-store (1.9.4.release), org.springframework.session:spring-session-data-mongo (>=1.3.0.release, <=1.3.3.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.github.mega13d:timeless-void (>=1.0, <=1.0.4), eu.michael-simons:datamongotest-autoconfigure-spring-boot (>=0.0.1, <=0.0.2) +117 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.mega13d:timeless-void =1.0, =0.0.1, =5.0.2, =5.0.2,...

com.github.krraghavan:mongodb-aggregate-query-support (>=0.7.1, <=0.7.17), org.apereo.cas:cas-server-core-api (5.1.0-rc2) +31 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.krraghavan:mongodb-aggregate-query-support =0.7.1,...

com.orange.fiware:openlpwa-iotagent (>=1.0.1, <=1.0.2), de.digitalcollections:iiif-bookshelf-webapp (>=2.2.0, <=2.3.0) +109 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.8.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.orange.fiware:openlpwa-iotagent =1.0.1, =2.2.0, =5.0.0.m1,...

com.epam.reportportal:commons-bugtracking (3.0.0), io.gravitee.am.gateway.handlers:gravitee-am-gateway-handlers (>=1.0.0, <=1.3.0) +13 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking 3.0.0 -...

org.springframework.data:spring-data-mongodb-cross-store (1.9.9.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

cn.patterncat:job-event-store-mongo (0.0.2), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.6.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.patterncat:job-event-store-mongo 0.0.2 -...

com.alibaba.smart.framework:smart-engine-extension-storage-mongodb (>=2.0.4, <=2.6.4), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.7.release) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.11.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

de.digitalcollections:iiif-bookshelf-webapp (>=2.3.1, <=2.5.1), io.gumga:gumga-application (>=1.5.23, <=4.0.4) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.digitalcollections:iiif-bookshelf-webapp =2.3.1, =1.5.23,...

com.epam.reportportal:commons-dao (3.0.0), com.epam.reportportal:commons-rules (3.0.0) +185 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-dao 3.0.0 -...

org.springframework.data:spring-data-mongodb-cross-store (1.10.2.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.aukletapm.go:go-spring (>=1.5.0, <=1.6.0), com.epam.reportportal:commons-bugtracking (3.1.0) +11 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.aukletapm.go:go-spring =1.5.0, =0.7.18, =1.0.0, =2.0.1,...

com.bushidowallet:bushido-service-lib (>=1.0.0, <=1.0.3), com.github.camel-labs:camel-labs-iot-cloudlet-document-driver (0.1.0) +23 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.6.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bushidowallet:bushido-service-lib =1.0.0, =0.5.17, =1.14,...

africa.absa:inception-codes (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +11403 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=2.0.0.release, <=2.7.18)

org.springframework.data:spring-data-commons MAVEN version =2.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2026-41716 Source advisory: OSV:GHSA-9FW2-H3HF-293R...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), com.eurodyn.qlack.fuse:qlack-fuse-aaa (3.9.9) +89 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=6.5.0, <=6.5.10)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.5.0, =1.0.0.ee-20260424025040, =11.14.0, =v6.3.3, =1.0.6, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.1.3 and more Source cves: CVE-2026-41694https://vulners.com/cve/CVE-2026-4...