br.com.sawcunhaos:scos-foundation-audit (>=1.0.0, <=1.1.0), br.com.sawcunhaos:scos-foundation-exception (>=1.0.0, <=1.1.0) +454 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-keyvalue MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =6.0.1, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m3 and more Source cves: CVE-2026-41719 Source advisory:...

com.genxiaogu:rate-limiter-spring-boot-starter (>=1.0.0, <=2.0.1), com.github.qiujiayu:autoload-cache-spring-boot-starter (>=1.1.0, <=6.6) +10 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.5.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.genxiaogu:rate-limiter-spring-boot-starter =1.0.0, =1.1.0...

com.cjoop:platform-core (0.0.1.release), com.cjoop:platform-security (0.0.1.release) +91 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.11.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.cjoop:platform-core 0.0.1.release -...

cn.sylinx:redis-spring-boot-starter (>=1.0.1, <=1.0.2), com.17jee:e-cache-hibernate-redis (>=3.0.1.9, <=3.0.1.11) +12 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.6.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.sylinx:redis-spring-boot-starter =1.0.1, =3.0.1.9, =3.0.1....

com.gitee.song666:upic-spring-common (1.0.0), com.github.bohrqiu.dubbo:dubbo-cache-core (>=1.0, <=1.2) +50 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.13.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.gitee.song666:upic-spring-common 1.0.0 -...

com.github.skyding228:spring-session-redis (1.0), net.mingsoft:ms-base (>=1.0.3, <=1.0.8) +14 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.10.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.github.skyding228:spring-session-redis 1.0 -...

cc.alans.netty-plus:netty-plus (1.0.0), cc.uncarbon.framework:helio-starter-rate-limit-redis (>=2.3.0, <=2.4.1) +820 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-keyvalue MAVEN version =3.4.0, =2.3.0, =2.3.0, =2.3.0, =0.0.1, =1.7.0.v3, =5.0.5, =3.2.5, =4.1.3 and more Source cves: CVE-2026-41719 Source advisory: GHSA-XG2J-3HJ6-PC24...

cn.dyaoming.common:common-cache (0.0.2), cn.ocoop.framework:shiro-spring-boot-autoconfigure (1.0.1) +42 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.4.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.dyaoming.common:common-cache 0.0.2 -...

cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39), cn.jiangzeyin:common-redis (>=1.0.0, <=1.0.3) +15 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.11.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.jiangzeyin.fast-boot:common-redis =1.0.3, =1.0.0, =0.0.1,...

cc.alans.netty-plus:netty-plus (1.0.0), cc.uncarbon.framework:helio-starter-rate-limit-redis (>=2.3.0, <=2.4.1) +820 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-keyvalue MAVEN version =3.4.0, =2.3.0, =2.3.0, =2.3.0, =0.0.1, =1.7.0.v3, =5.0.5, =3.2.5, =4.1.3 and more Source cves: CVE-2026-41719 Source advisory: OSV:GHSA-XG2J-3HJ6-PC24...

org.springframework.data:spring-data-redis (1.7.9.release) potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.9.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - org.springframework.data:spring-data-redis 1.7.9.release Sour...

org.springframework.data:spring-data-redis (1.8.2.release) potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.2.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - org.springframework.data:spring-data-redis 1.8.2.release Sour...

com.github.upers:betexdao (>=1.0.0, <=1.2.7), com.nepxion:discovery-common-redis (>=edgware.1.0.0, <=3.14.0) +13 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.17.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.github.upers:betexdao =1.0.0, =edgware.1.0.0,...

com.wueasy:wueasy-base-web (>=1.2.0, <=1.3.3), com.wueasy:wueasy-gateway (>=1.4.0, <=1.4.2) +11 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.18.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.wueasy:wueasy-base-web =1.2.0, =1.4.0, =1.3.0,...

com.epam.reportportal:commons-bugtracking (2.7.0), com.epam.reportportal:commons-dao (>=2.7.0, <=2.7.1.1) +41 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.3.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.epam.reportportal:commons-bugtracking 2.7.0 -...

com.github.acierto:aciertoteam-common (1.1.0), com.github.acierto:aciertoteam-geo (1.1.0) +36 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.10.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.acierto:aciertoteam-common 1.1.0 -...

io.github.gracefullliam:paopao-log (>=alpha, <=1.0.0.release), io.github.shuigedeng:taotao-cloud-starter-mq-pulsar (>=2023.05, <=2023.11) +4 more potentially affected by CVE-2026-41732 via org.springframework.pulsar:spring-pulsar (0.2.0)

org.springframework.pulsar:spring-pulsar MAVEN version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.pulsar:spring-pulsar and may be impacted: - io.github.gracefullliam:paopao-log =alpha, =2023.05, =2023.11 -...

org.springframework.boot:spring-boot-starter-data-rest (>=1.0.0.release, <=1.0.1.release), org.springframework.data:spring-data-rest-webmvc (2.0.1.release) potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.0.1.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.boot:spring-boot-starter-data-rest...

com.github.eventasia:eventasia-stream-kafka (>=0.0.12.release, <=0.0.13.release), org.apereo.cas:cas-server-core-configuration-cloud-kafka (>=5.1.0-rc4, <=5.1.9) +1 more potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.2.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - com.github.eventasia:eventasia-stream-kafka =0.0.12.release, =5.1.0-rc4,...

org.springframework.cloud:spring-cloud-starter-bus-kafka (1.3.1.release), org.springframework.cloud:spring-cloud-stream-docs (chelsea.sr2) potentially affected by CVE-2026-41726 via org.springframework.kafka:spring-kafka (1.1.4.release)

org.springframework.kafka:spring-kafka MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.cloud:spring-cloud-starter-bus-kafka 1.3.1.release -...