io.springfox:springfox-data-rest (>=2.6.0, <=2.6.1), org.apache.geode:geode-web-api (>=1.0.0-incubating, <=1.1.1) potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.21.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.21.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - io.springfox:springfox-data-rest =2.6.0, =1.0.0-incubating, =1.1.1...