CVE-2026-41716

Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests. Affected versions: Spring Data Commons 2.7.0 through 2.7.19; 3.3.0 through 3.3.16; 3.4.0 through 3.4.14; 3.5.0 through 3.5.11;...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +3274 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=3.3.0, <=3.3.13)

org.springframework.data:spring-data-commons MAVEN version =3.3.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41716 Source advisory: MEND:CVE-2026-41716...

CVE-2026-41711 Potential Denial of Service through crafted Sort Parameters

Applications using Spring Data Commons may be vulnerable to a Denial of Service DoS attack leading to a StackOverflowException when parsing Sort parameters. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through...

CVE-2026-41711

Applications using Spring Data Commons may be vulnerable to a Denial of Service DoS attack leading to a StackOverflowException when parsing Sort parameters. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through...

CVE-2026-41711 Potential Denial of Service through crafted Sort Parameters

Applications using Spring Data Commons may be vulnerable to a Denial of Service DoS attack leading to a StackOverflowException when parsing Sort parameters. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through...

CVE-2026-41711 Potential Denial of Service through crafted Sort Parameters

Applications using Spring Data Commons may be vulnerable to a Denial of Service DoS attack leading to a StackOverflowException when parsing Sort parameters. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through...

CVE-2026-41711

Summary: CVE-2026-41711 affects Spring Data Commons and can cause a Denial of Service via a StackOverflowException when parsing Sort parameters. Affected versions include 4.0.0–4.0.5; 3.5.0–3.5.11; 3.4.0–3.4.14; 3.3.0–3.3.16; 3.2.0–3.2.15; 3.1.0–3.1.14; 3.0.0–3.0.15; 2.7.0–2.7.19. The provided do...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +3274 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.3.0, <=3.3.13)

org.springframework.data:spring-data-commons MAVEN version =3.3.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41711 Source advisory: MEND:CVE-2026-41711...

ai.apiverse:apipulse (1.0.1), au.org.consumerdatastandards:data-holder (>=2.3.0, <=2.4.1) +4234 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=2.7.0, <=2.7.18)

org.springframework.data:spring-data-commons MAVEN version =2.7.0, =2.3.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.2.0, =6.10.5 and more Source cves: CVE-2026-41711 Source advisory: MEND:CVE-2026-41711...

app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2327 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41711 Source advisory: MEND:CVE-2026-41711...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3960 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), ai.intelliswarm:swarmai-core (>=1.0.0, <=1.0.29) +3364 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-commons MAVEN version =3.4.0, =0.114.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =3.3.0, =0.5.8, =0.0.1, =0.0.1, =0.0.2 - be.jidoka:jdk-keycloak-admin 2.5.0 and more Source cves: CVE-2026-41711 Source advisory:...

cn.dinodev:dinodev-spring-core (>=3.3.0, <=3.3.4), cn.dinodev:dinodev-spring-data (>=3.3.0, <=3.3.4) +325 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=3.3.0, <=3.3.13)

org.springframework.data:spring-data-relational MAVEN version =3.3.0, =3.3.0, =3.3.0, =15.0-release, =0.3.0, =1.5.3, =5.5.0, =5.5.0, =9.0.8, =9.0.8, =9.0.8, =9.0.8, =9.0.8, =9.0.8, =9.0.8, =9.0.8, =9.1.0 and more Source cves: CVE-2026-41697 Source advisory: MEND:CVE-2026-41697...

CVE-2026-41697 Spring Data Relational Parameter not Escaped for Query By Example LIKE Pattern

Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher STARTING, ENDING, or CONTAINING in Query By Example QBE. An attacker can supply wildcard characters to perform boolean-based blind data inference. Affected versions: Spring Data...

ch.nexsol-tech.gateway:sample-gateway (>=0.0.1, <=1.1.0), ch.nexsol-tech.gateway:spring-cloud-gateway-database (>=0.0.1, <=1.1.0) +610 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-relational MAVEN version =3.4.0, =0.0.1, =0.0.1, =2.0.0-release, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =2.51.0 and more Source cves: CVE-2026-41697 Source advisory: MEND:CVE-2026-41697https://vulners.com/mend/MEND:CVE-...

ch.nexsol-tech.gateway:sample-gateway (>=1.2.0, <=1.3.1), ch.nexsol-tech.gateway:spring-cloud-gateway-database (>=1.2.0, <=1.3.1) +71 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-r2dbc (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-r2dbc MAVEN version =3.5.0, =1.2.0, =1.2.0, =15.14-release, =3.14.0-rc1, =3.14.0-rc1, =7.0.0, =7.0.0, =0.0.1, =1.0.4 and more Source cves: CVE-2026-41697 Source advisory: MEND:CVE-2026-41697...

be.appify.prefab:prefab-annotation-processor (>=0.1.0, <=0.1.1), be.appify.prefab:prefab-core (>=0.1.0, <=0.1.1) +669 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-relational MAVEN version =3.5.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.1.21 and more Source cves: CVE-2026-41697 Source advisory: MEND:CVE-2026-41697...

CVE-2026-41697 Spring Data Relational Parameter not Escaped for Query By Example LIKE Pattern

Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher STARTING, ENDING, or CONTAINING in Query By Example QBE. An attacker can supply wildcard characters to perform boolean-based blind data inference. Affected versions: Spring Data...

be.appify.prefab:prefab-annotation-processor (>=0.1.0, <=0.1.1), be.appify.prefab:prefab-core (>=0.1.0, <=0.1.1) +583 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-jdbc (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-jdbc MAVEN version =3.5.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.1.21 and more Source cves: CVE-2026-41697 Source advisory: MEND:CVE-2026-41697...

cn.net.vidyo:dylink-data-jdbc (3.0.0.3.release), cn.workde:workde-core (>=2.0.0-release, <=2.0.3-release) +563 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-jdbc (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-jdbc MAVEN version =3.4.0, =2.0.0-release, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.1.0, =2.11.0, =1.1.0, =2.51.0 and more Source cves: CVE-2026-41697 Source advisory:...