CLSA-2026-1792568406 TuxCare security update for org.springframework.hateoas:spring-hateoas (1 CVE)

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 1 CVE. Fixed in 2.1.3-tuxcare.1...

CLSA-2026-1791959812 TuxCare security update for org.springframework.hateoas:spring-hateoas (1 CVE)

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 1 CVE. Fixed in 1.1.2.RELEASE-tuxcare.1...

PT-2026-86888

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 2 CVEs. Fixed in 2.0.7-tuxcare.1...

PT-2026-75227

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 2 CVEs. Fixed in 1.5.6-tuxcare.4...

net.eusashead.hateoas:spring-halbuilder-page (1.0.0.release) potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (0.6.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.6.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - net.eusashead.hateoas:spring-halbuilder-page 1.0.0.release Source...

io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.cr2, <=1.1.0.cr3), io.fabric8:process-spring-boot-itests-service-invoicing (>=1.1.0.cr2, <=1.1.0.cr5) +3 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (0.12.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing =1.1.0.cr2,...

com.bloxbean:bloxql-lib (0.0.1), com.fmarslan.struct-spring:fm-application (1.0.0) +154 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (0.25.1.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.25.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - com.bloxbean:bloxql-lib 0.0.1 -...

ai.apiverse:apipulse (1.0.1), app.commerce-io:spring-boot-starter-data-search-jpa (>=1.1.0-rc1, <=1.3.0) +507 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (>=1.0.0.release, <=1.5.6)

org.springframework.hateoas:spring-hateoas MAVEN version =1.0.0.release, =1.1.0-rc1, =1.0.9.release, =1.0.9.release, =1.0.9.release, =1.1.8.release, =1.1.5.release, =1.4.0, =0.0.1, =0.0.1, =2.0.1, =3.0.5 - com.backbase.oss:scdf-maven-plugin 0.2.0 and more Source cves: CVE-2026-41006 Source...

be.personify.iam:personify-api (>=1.5.3.release, <=1.5.8.release), be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.8.release) +88 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (>=2.4.0, <=2.4.1)

org.springframework.hateoas:spring-hateoas MAVEN version =2.4.0, =1.5.3.release, =1.5.4.release, =1.5.4.release, =0.3.3, =0.3.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.11.1, =0.11.1, =0.12.0 and more Source cves: CVE-2026-41006 Source advisory:...

com.bgiddens:spring-data-rest-utils (>=0.0.1-beta, <=0.0.7-beta), com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (>=3.0.0, <=3.0.1) +44 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (>=3.0.0, <=3.0.3)

org.springframework.hateoas:spring-hateoas MAVEN version =3.0.0, =0.0.1-beta, =3.0.0, =3.0.0, =1.0.0, =4.0, =4.0, =3.0.9, =3.0.9, =3.0.9, =3.0.0, =1.0.45, =1.0.81 and more Source cves: CVE-2026-41006 Source advisory: GHSA-7FXC-486F-32Q9https://vulners.com/github/GHSA-7FXC-4...

com.bgiddens:spring-data-rest-utils (>=0.0.1-beta, <=0.0.7-beta), com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (>=3.0.0, <=3.0.1) +44 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (>=3.0.0, <=3.0.3)

org.springframework.hateoas:spring-hateoas MAVEN version =3.0.0, =0.0.1-beta, =3.0.0, =3.0.0, =1.0.0, =4.0, =4.0, =3.0.9, =3.0.9, =3.0.9, =3.0.0, =1.0.45, =1.0.81 and more Source cves: CVE-2026-41006 Source advisory: OSV:GHSA-7FXC-486F-32Q9https://vulners.com/osvghsa/OSV:G...

ai.apiverse:apipulse (1.0.1), app.commerce-io:spring-boot-starter-data-search-jpa (>=1.1.0-rc1, <=1.3.0) +507 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (>=1.0.0.release, <=1.5.6)

org.springframework.hateoas:spring-hateoas MAVEN version =1.0.0.release, =1.1.0-rc1, =1.0.9.release, =1.0.9.release, =1.0.9.release, =1.1.8.release, =1.1.5.release, =1.4.0, =0.0.1, =0.0.1, =2.0.1, =3.0.5 - com.backbase.oss:scdf-maven-plugin 0.2.0 and more Source cves: CVE-2026-41007 Source...

ai.apiverse:apipulse (1.0.1), app.commerce-io:spring-boot-starter-data-search-jpa (>=1.1.0-rc1, <=1.3.0) +507 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (>=1.0.0.release, <=1.5.6)

org.springframework.hateoas:spring-hateoas MAVEN version =1.0.0.release, =1.1.0-rc1, =1.0.9.release, =1.0.9.release, =1.0.9.release, =1.1.8.release, =1.1.5.release, =1.4.0, =0.0.1, =0.0.1, =2.0.1, =3.0.5 - com.backbase.oss:scdf-maven-plugin 0.2.0 and more Source cves: CVE-2026-41007 Source...

com.bloxbean:bloxql-lib (0.0.1), com.fmarslan.struct-spring:fm-application (1.0.0) +154 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.25.1.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.25.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - com.bloxbean:bloxql-lib 0.0.1 -...

cn.bestwu.simpleframework:simpleframework-security (>=0.1.31, <=0.1.33), com.devonfw.cobigen:templates-devon4j (>=3.0.0, <=2021.12.006) +205 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.25.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.25.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - cn.bestwu.simpleframework:simpleframework-security =0.1.31, =3.0.0...

am.ik.home:uaa-client (>=1.3.0, <=1.9.0), am.ik.home:uaa-integration-test (>=1.3.0, <=1.9.0) +181 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.23.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.23.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - am.ik.home:uaa-client =1.3.0, =1.3.0, =1.3.0, =1.0.1.release,...

com.bgiddens:spring-data-rest-utils (>=0.0.1-beta, <=0.0.7-beta), com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (>=3.0.0, <=3.0.1) +44 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (>=3.0.0, <=3.0.3)

org.springframework.hateoas:spring-hateoas MAVEN version =3.0.0, =0.0.1-beta, =3.0.0, =3.0.0, =1.0.0, =4.0, =4.0, =3.0.9, =3.0.9, =3.0.9, =3.0.0, =1.0.45, =1.0.81 and more Source cves: CVE-2026-41007 Source advisory: GHSA-439X-6767-44CVhttps://vulners.com/github/GHSA-439X-6...

be.personify.iam:personify-api (>=1.5.3.release, <=1.5.8.release), be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.8.release) +88 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (>=2.4.0, <=2.4.1)

org.springframework.hateoas:spring-hateoas MAVEN version =2.4.0, =1.5.3.release, =1.5.4.release, =1.5.4.release, =0.3.3, =0.3.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.11.1, =0.11.1, =0.12.0 and more Source cves: CVE-2026-41007 Source advisory:...

com.bgiddens:spring-data-rest-utils (>=0.0.1-beta, <=0.0.7-beta), com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (>=3.0.0, <=3.0.1) +44 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (>=3.0.0, <=3.0.3)

org.springframework.hateoas:spring-hateoas MAVEN version =3.0.0, =0.0.1-beta, =3.0.0, =3.0.0, =1.0.0, =4.0, =4.0, =3.0.9, =3.0.9, =3.0.9, =3.0.0, =1.0.45, =1.0.81 and more Source cves: CVE-2026-41007 Source advisory: MEND:CVE-2026-41007https://vulners.com/mend/MEND:CVE-2026...

com.bgiddens:spring-data-rest-utils (>=0.0.1-beta, <=0.0.7-beta), com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (>=3.0.0, <=3.0.1) +44 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (>=3.0.0, <=3.0.3)

org.springframework.hateoas:spring-hateoas MAVEN version =3.0.0, =0.0.1-beta, =3.0.0, =3.0.0, =1.0.0, =4.0, =4.0, =3.0.9, =3.0.9, =3.0.9, =3.0.0, =1.0.45, =1.0.81 and more Source cves: CVE-2026-41006 Source advisory: MEND:CVE-2026-41006https://vulners.com/mend/MEND:CVE-2026...