PT-2026-134582

TuxCare rebuilt org.springframework.data:spring-data-mongodb to address 1 CVE. Fixed in 3.3.10-tuxcare.3...

PT-2026-133845

TuxCare rebuilt org.springframework.data:spring-data-mongodb to address 1 CVE. Fixed in 3.1.9-tuxcare.3...

be.appify.prefab:prefab-annotation-processor (>=0.7.0, <=0.10.9), be.appify.prefab:prefab-mongodb (>=0.5.0, <=0.10.9) +127 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=5.0.0-m4, <=5.0.5)

org.springframework.data:spring-data-mongodb MAVEN version =5.0.0-m4, =0.7.0, =0.5.0, =0.5.0, =4.0.0.0-m2, =4.0.0.0-m2, =1.0.1, =1.0.1, =3.0.0, =4.0.0, =4.3.1, =0.0.1, =0.0.2, =0.0.2, =1.0.4 - com.mzinx:mongodb-spring-materialized-view 1.0.0 and more Source cves: CVE-2026-41717 Source advisory:...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), cn.craccd:mongohelper (1.0.0) +272 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (>=4.4.0, <=4.4.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.4.0, =0.114.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.6.0 and more Source cves: CVE-2026-41696 Source advisory: OSV:GHSA-HC43-M36C-8V33...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +488 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (>=4.0.0, <=4.3.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.0.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41696 Source advisory: OSV:GHSA-HC43-M36C-8V33...

cn.craccd:mongohelper (>=0.1.0, <=0.2.7), cn.dev8:ktmvc (>=0.1.28, <=0.1.39) +34 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.craccd:mongohelper =0.1.0, =0.1.28, =0.1.10, =2.0.0, =0.1.0,...

ai.platon.commons:distributed-lock-example (>=1.4.2, <=1.4.3), ai.platon.commons:distributed-lock-mongo (>=1.4.2, <=1.4.3) +628 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (>=3.0.0.release, <=3.4.18)

org.springframework.data:spring-data-mongodb MAVEN version =3.0.0.release, =1.4.2, =1.4.2, =1.6.6, =1.6.6, =0.0.1, =0.1.0, =0.1.0, =1.1.13, =1.0.7, =1.0.7, =0.0.1, =0.0.5, =1.1.0, =2.1.0 and more Source cves: CVE-2026-41696 Source advisory: GHSA-HC43-M36C-8V33...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), cn.bbwres:biscuit-mongodb-boot-starter (>=3.0.0, <=3.0.2) +251 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (>=4.5.0, <=4.5.11)

org.springframework.data:spring-data-mongodb MAVEN version =4.5.0, =1.0.0.ee-20260424025040, =3.0.0, =3.5.0.0, =3.5.5.3, =3.5.5.3, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.5.2 and more Source cves: CVE-2026-41696 Source advisory:...

com.github.mega13d:timeless-void (>=1.0, <=1.0.4), eu.michael-simons:datamongotest-autoconfigure-spring-boot (>=0.0.1, <=0.0.2) +117 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.mega13d:timeless-void =1.0, =0.0.1, =5.0.2, =5.0.2,...

com.epam.reportportal:commons-bugtracking (>=4.0.0, <=4.0.4), com.sinsz.c:bxfs-mongodb (1.0.1) +10 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking =4.0.0, =1.2, =2.6.0...

ch.sahits.game:openpatriciantest (>=0.9.1-rc1, <=0.9.1), cn.minsin:mutils-data-mongodb (>=0.0.2.release, <=0.4.0.release) +14 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =0.9.1-rc1, =0.0.2.release,...

com.github.eagle6688:devutility.external.mongo (>=2.0.6.1, <=2.0.6.4), com.github.krraghavan:mongodb-aggregate-query-support-reactive (>=0.8.0, <=0.8.4) +15 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.eagle6688:devutility.external.mongo =2.0.6.1, =0.8.0...

com.aukletapm.go:go-spring (>=1.5.0, <=1.6.0), com.epam.reportportal:commons-bugtracking (3.1.0) +11 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.aukletapm.go:go-spring =1.5.0, =0.7.18, =1.0.0, =2.0.1,...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), cn.craccd:mongohelper (1.0.0) +272 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=4.4.0, <=4.4.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.4.0, =0.114.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.6.0 and more Source cves: CVE-2026-41717 Source advisory: GHSA-5WHC-4Q84-FJ73...

com.bq.corbel.lib:mongodb (>=0.7.0, <=0.9.1), com.bq.corbel.lib:queries (>=0.15.0, <=0.20.0) +74 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.6.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bq.corbel.lib:mongodb =0.7.0, =0.15.0, =0.15.0, =0.15.0,...

com.bq.corbel.lib:mongodb (>=0.7.0, <=0.9.1), com.bq.corbel.lib:queries (>=0.15.0, <=0.20.0) +74 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.6.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bq.corbel.lib:mongodb =0.7.0, =0.15.0, =0.15.0, =0.15.0,...

com.breuninger.boot:example-admin (>=3.0.3.release, <=3.0.4.release), com.breuninger.boot:example-app (>=3.0.3.release, <=3.1.0.release) +40 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.breuninger.boot:example-admin =3.0.3.release, =3.0.3.releas...

com.epam.reportportal:commons-bugtracking (>=4.0.0, <=4.0.4), com.sinsz.c:bxfs-mongodb (1.0.1) +10 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking =4.0.0, =1.2, =2.6.0...

ch.sahits.game:openpatriciantest (>=0.9.1-rc1, <=0.9.1), cn.minsin:mutils-data-mongodb (>=0.0.2.release, <=0.4.0.release) +14 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =0.9.1-rc1, =0.0.2.release,...

com.2oi7:file-uploader (1.0.0), com.antheminc.oss:nimbus-starter (>=1.3.0.m1, <=1.3.2.m1) +20 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.2oi7:file-uploader 1.0.0 - com.antheminc.oss:nimbus-starte...