cn.dev8:ktmyoql (>=0.0.1, <=0.0.7), com.avides.springboot.testcontainer:springboot-testcontainer-mongodb (>=0.1.0-rc7, <=0.1.0-rc10) +25 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.dev8:ktmyoql =0.0.1, =0.1.0-rc7, =1.0.4, =0.3.0, =0.28.0,...

com.github.lkqm:spring-data-mongodb-extends (0.1.0), io.flamingock:mongodb-springdata-v2-driver (>=0.0.10-beta, <=0.0.32-beta) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.lkqm:spring-data-mongodb-extends 0.1.0 -...

com.eworkcloud:ework-cloud-starter-mongo (>=1.5.6, <=1.8.6), org.springframework.boot:spring-boot-starter-data-mongodb (1.5.20.release) +1 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.20.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.eworkcloud:ework-cloud-starter-mongo =1.5.6, =1.8.6 -...

com.btmatthews.atlas:atlas-mongodb (1.0.0), com.github.microon:microon-services-userdirectory (0.0) +6 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.btmatthews.atlas:atlas-mongodb 1.0.0 -...

org.springframework.data:spring-data-mongodb-cross-store (1.9.9.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.capitalone.dashboard:api (>=3.3.0, <=3.4.52), com.capitalone.dashboard:api-audit (>=3.5.1, <=3.7.33) +15 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.23.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.capitalone.dashboard:api =3.3.0, =3.5.1, =3.2.0, =3.10.0,...

com.epam.reportportal:commons-dao (>=3.1.2, <=3.3.2), com.epam.reportportal:commons-rules (>=3.1.1, <=3.3.0) +231 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-dao =3.1.2, =3.1.1, =3.1.2,...

com.github.krraghavan:mongodb-aggregate-query-support (>=0.7.1, <=0.7.17), org.apereo.cas:cas-server-core-api (5.1.0-rc2) +31 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.krraghavan:mongodb-aggregate-query-support =0.7.1,...

com.github.aidensuen:mongodao-core (>=1.0.1, <=1.1.2), com.github.aidensuen:mongodao-pagehelper (>=1.0.3, <=1.1.2) +30 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.aidensuen:mongodao-core =1.0.1, =1.0.3, =1.0.3,...

org.resthub:resthub-mongodb (2.1.3), org.springframework.data:spring-data-mongodb-cross-store (1.2.4.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.resthub:resthub-mongodb 2.1.3 -...

cloud.altemista.fwk.persistence:cloud-altemistafwk-core-persistence-mongodb-conf (>=3.0.0.release, <=3.0.1.release), com.github.paulcwarren:content-mongo-spring-boot-starter (>=0.3.0, <=0.4.0) +18 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

de.digitalcollections:iiif-bookshelf-webapp (>=2.3.1, <=2.5.1), io.gumga:gumga-application (>=1.5.23, <=4.0.4) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.digitalcollections:iiif-bookshelf-webapp =2.3.1, =1.5.23,...

GHSA-HC43-M36C-8V33 Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods

Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected versions: Spring Data MongoDB 5.0.0...

com.assist4j:assist4j-dao (>=1.0.0, <=1.1.30), com.assist4j:assist4j-data (>=1.0.0, <=1.1.30) +20 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.assist4j:assist4j-dao =1.0.0, =1.0.0, =4.0.0, =4.0.0,...

com.antheminc.oss:nimbus-core (>=1.1.7, <=1.2.0), com.antheminc.oss:nimbus-entity-dsl (>=1.1.7, <=1.2.0) +10 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.12.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.antheminc.oss:nimbus-core =1.1.7, =1.1.7, =1.1.7, =1.1.7,...

org.grails:grails-datastore-gorm-mongo (>=1.0.0.rc5, <=1.0.0.release), org.grails:grails-datastore-mongo (>=1.0.0.rc5, <=1.0.0.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.0.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:grails-datastore-gorm-mongo =1.0.0.rc5, =1.0.0.rc5,...

com.capitalone.dashboard:core (0.4.1), com.sangupta:jerry-services (0.3.0) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.6.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.capitalone.dashboard:core 0.4.1 - com.sangupta:jerry-servic...

com.gitee.zodiacstack:zodiac-mongo (>=1.2.11, <=1.6.8), com.gitee.zodiacstack:zodiac-mongo-spring-boot-starter (>=1.2.11, <=1.6.8) +14 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.12.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.gitee.zodiacstack:zodiac-mongo =1.2.11, =1.2.11,...

org.gjgr.pig:pig-chivalrous-mongo (0.0.1.20201207g), org.springframework.data:spring-data-mongodb-cross-store (2.0.1.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.gjgr.pig:pig-chivalrous-mongo 0.0.1.20201207g -...

com.capitalone.dashboard:hygieia-common (>=4.0.1, <=4.1.0), com.eworkcloud.starter:ework-cloud-starter-mongo (>=2.1.7, <=2.2.2) +11 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.capitalone.dashboard:hygieia-common =4.0.1, =2.1.7, =1.30.0...