app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2326 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41716 Source advisory: OSV:GHSA-9FW2-H3HF-293R...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3955 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2326 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41716 Source advisory: GHSA-9FW2-H3HF-293R...

org.grails:grails-datastore-gorm-mongo (>=1.0.0.rc5, <=1.0.0.release), org.grails:grails-datastore-mongo (>=1.0.0.rc5, <=1.0.0.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.0.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:grails-datastore-gorm-mongo =1.0.0.rc5, =1.0.0.rc5,...

com.github.edgarespina:mwa-mongo (>=0.1.0, <=0.1.6), com.github.edgarespina:mwa-morphia (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.0.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.edgarespina:mwa-mongo =0.1.0, =0.1.0, =2.1, =0.1.0,...

org.springframework.boot:spring-boot-starter-data-mongodb (1.4.4.release), org.springframework.data:spring-data-mongodb-cross-store (1.9.7.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.7.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.springframework.boot:spring-boot-starter-data-mongodb (1.3.8.release), org.springframework.data:spring-data-mongodb-cross-store (1.8.5.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.8.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

cn.patterncat:job-event-store-mongo (0.0.2), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.6.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.patterncat:job-event-store-mongo 0.0.2 -...

com.alibaba.smart.framework:smart-engine-extension-storage-mongodb (>=2.0.4, <=2.6.4), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.7.release) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.11.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

de.digitalcollections:iiif-bookshelf-webapp (>=2.3.1, <=2.5.1), io.gumga:gumga-application (>=1.5.23, <=4.0.4) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.digitalcollections:iiif-bookshelf-webapp =2.3.1, =1.5.23,...

com.bushidowallet:bushido-service-lib (>=1.0.0, <=1.0.3), com.github.camel-labs:camel-labs-iot-cloudlet-document-driver (0.1.0) +23 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.6.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bushidowallet:bushido-service-lib =1.0.0, =0.5.17, =1.14,...

africa.absa:inception-codes (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +11403 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=2.0.0.release, <=2.7.18)

org.springframework.data:spring-data-commons MAVEN version =2.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2026-41716 Source advisory: OSV:GHSA-9FW2-H3HF-293R...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), com.eurodyn.qlack.fuse:qlack-fuse-aaa (3.9.9) +89 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=6.5.0, <=6.5.10)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.5.0, =1.0.0.ee-20260424025040, =11.14.0, =v6.3.3, =1.0.6, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.1.3 and more Source cves: CVE-2026-41694https://vulners.com/cve/CVE-2026-4...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3955 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +6072 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.0.0, <=3.3.13)

org.springframework.data:spring-data-commons MAVEN version =3.0.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41711 Source advisory: OSV:GHSA-5VPF-XVV7-C8VH...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +6072 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.0.0, <=3.3.13)

org.springframework.data:spring-data-commons MAVEN version =3.0.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41711 Source advisory: GHSA-5VPF-XVV7-C8VH...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), ai.intelliswarm:swarmai-core (>=1.0.0, <=1.0.29) +3360 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-commons MAVEN version =3.4.0, =0.114.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =3.3.0, =0.5.8, =0.0.1, =0.0.1, =0.0.2 - be.jidoka:jdk-keycloak-admin 2.5.0 and more Source cves: CVE-2026-41711 Source advisory:...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), ai.intelliswarm:swarmai-core (>=1.0.0, <=1.0.29) +3360 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-commons MAVEN version =3.4.0, =0.114.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =3.3.0, =0.5.8, =0.0.1, =0.0.1, =0.0.2 - be.jidoka:jdk-keycloak-admin 2.5.0 and more Source cves: CVE-2026-41711 Source advisory:...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3955 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2326 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41711 Source advisory: GHSA-5VPF-XVV7-C8VH...