org.springframework.data:spring-data-rest-webmvc (2.1.6.release) potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.1.6.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

org.springframework.data:spring-data-rest-webmvc (2.0.0.release) potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.0.0.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

com.github.codefrogcc:allocation (>=1.0.0, <=1.1.4), com.github.codefrogcc:commons-config (>=1.0.0, <=1.2.6) +4 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.6.13.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.codefrogcc:allocation =1.0.0, =1.0.0, =2.9.1,...

de.is24.common:switchman (>=1.0, <=1.3), io.fabric8.jube.images.fabric8:springboot-webmvc (>=2.0.20, <=2.0.37) +2 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.2.1.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - de.is24.common:switchman =1.0, =2.0.20, =1.2.0.release,...

org.springframework.data:spring-data-rest-webmvc (2.0.3.release) potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.0.3.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

org.springframework.boot:spring-boot-starter-data-rest (1.5.18.release), org.springframework.data:spring-data-rest-hal-browser (2.6.17.release) +1 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.6.17.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

org.springframework.boot:spring-boot-starter-data-rest (1.5.5.release), org.springframework.data:spring-data-rest-hal-browser (2.6.5.release) +1 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.6.5.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

org.jsondoc:jsondoc-springmvc (>=1.2.14, <=1.2.23), org.springframework.data:spring-data-rest-hal-browser (2.5.1.release) +1 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.5.1.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.jsondoc:jsondoc-springmvc =1.2.14, =1.2.23 -...

org.springframework.data:spring-data-rest-hal-browser (2.4.6.release), org.springframework.data:spring-data-rest-webmvc (2.4.6.release) potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.4.6.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...

org.springframework.boot:spring-boot-starter-data-rest (1.5.8.release), org.springframework.data:spring-data-rest-hal-browser (2.6.8.release) +1 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.6.8.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

io.fabric8:process-spring-boot-itests-service-invoicing (>=1.2.0.beta2, <=1.2.0.beta3), org.springframework.boot:spring-boot-starter-data-rest (1.1.5.release) +1 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.1.2.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - io.fabric8:process-spring-boot-itests-service-invoicing...

org.springframework.boot:spring-boot-starter-data-rest (>=1.5.11.release, <=1.5.12.release), org.springframework.data:spring-data-rest-hal-browser (2.6.11.release) +1 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.6.11.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

com.groupbyinc:common-spring-boot (>=79, <=92), com.heapbrain:heapaudit (1.0.0) +6 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.5.5.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.groupbyinc:common-spring-boot =79, =1.0.1, =1.0.1,...

org.springframework.data:spring-data-rest-webmvc (2.3.1.release) potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.3.1.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-webmvc...

org.springframework.data:spring-data-rest-hal-browser (2.4.6.release), org.springframework.data:spring-data-rest-webmvc (2.4.6.release) potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.4.6.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...

ai.apiverse:apipulse (1.0.1), ca.denisab85:telegram-restapi (0.0.1) +59 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-webmvc (>=3.7.0, <=3.7.18)

org.springframework.data:spring-data-rest-webmvc MAVEN version =3.7.0, =0.4.0, =0.4.0, =0.4.0, =2.1.6, =2.1.6, =2.1.6, =1.1.4.release, =3.0.0, =2.0.0, =5.0.3, =1.0.3, =1.1.2 and more Source cves: CVE-2026-41837 Source advisory: MEND:CVE-2026-41837...

com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (>=1.2.0, <=1.4.0), com.contentgrid.spring:contentgrid-automations-rest (>=0.15.0, <=0.17.0) +55 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-webmvc (>=4.3.0, <=4.3.13)

org.springframework.data:spring-data-rest-webmvc MAVEN version =4.3.0, =1.2.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =0.15.0, =2.0.0, =2.0.4 - com.gitlab.mattldulany:sharedresources 2.0.0 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.7 -...

br.com.archbase:archbase-annotation-processor (>=2.0.0, <=2.1.21), br.com.archbase:archbase-app-framework (>=2.0.0, <=2.1.21) +76 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-webmvc (>=4.5.0, <=4.5.11)

org.springframework.data:spring-data-rest-webmvc MAVEN version =4.5.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.21 and more Source cves: CVE-2026-41837 Source advisory: MEND:CVE-2026-41837...

com.bgiddens:spring-data-rest-utils (>=0.0.1-beta, <=0.0.7-beta), com.boschsemanticstack:semanticstack-rql-examples-querydsljpa (>=3.0.0, <=3.0.1) +29 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-webmvc (>=5.0.0, <=5.0.5)

org.springframework.data:spring-data-rest-webmvc MAVEN version =5.0.0, =0.0.1-beta, =3.0.0, =3.0.0, =3.0.9, =3.0.9, =3.0.9, =2026.05, =2026.06 - io.github.vsvyatski:content-fs-spring-boot-starter 4.0.0 - io.github.vsvyatski:content-jpa-spring-boot-starter 4.0.0 -...

gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1, <=0.0.8), org.springframework.boot:spring-boot-starter-data-rest (1.1.4.release) +5 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.14.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.14.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin...