org.springframework.data:spring-data-jpa (1.4.0.release), org.springframework.data:spring-data-mongodb (1.3.0.release) +4 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.6.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.6.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-data-jpa 1.4.0.release -...

com.anbai:ab-elasticsearch (7.0.0), com.blazebit:blaze-persistence-examples-showcase-fragments-spring-data (1.6.7) +74 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.20.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.anbai:ab-elasticsearch 7.0.0 -...

com.ibeetl:xlsunit (>=1.0.0, <=1.0.4), com.kurento.kmf:kmf-content-api (>=3.0.5, <=4.3.1) +26 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.8.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ibeetl:xlsunit =1.0.0, =3.0.5, =1.0.4, =5.0.3, =5.0.4 -...

cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39), cn.jiangzeyin:common-redis (>=1.0.0, <=1.0.3) +57 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.11.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - cn.jiangzeyin.fast-boot:common-redis =1.0.3, =1.0.0, =0.0.1,...

com.sksamuel.elasticsearch:elasticsearch-river-neo4j (>=0.90.7.0, <=0.90.9.0), org.springframework.data:spring-cql (1.3.6.release) +15 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.sksamuel.elasticsearch:elasticsearch-river-neo4j =0.90.7.0...

com.github.ydespreaux.spring.data:spring-data-jpa-criteria (1.0.1), com.wueasy:wueasy-base-web (>=1.2.0, <=1.3.3) +68 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.18.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.ydespreaux.spring.data:spring-data-jpa-criteria...

org.springframework.boot:spring-boot-starter-data-elasticsearch (>=1.1.11.release, <=1.1.12.release), org.springframework.boot:spring-boot-starter-data-jpa (>=1.1.11.release, <=1.1.12.release) +22 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.8.5.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.boot:spring-boot-starter-data-elasticsearch...

com.github.iaunzu:strqlbuilder (>=1.1.0, <=1.1.1), com.github.osvaldopina:linkbuilder (>=0.1.1, <=0.3.0) +58 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.9.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.9.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.iaunzu:strqlbuilder =1.1.0, =0.1.1, =1.0.5, =0.8.5,...

com.highway2urhell:h2hell-web (>=1.0.1, <=1.0.5), io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.beta6, <=1.1.0.cr1) +24 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.7.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.highway2urhell:h2hell-web =1.0.1, =1.1.0.beta6, =1.1.0.beta...

com.ganshane.lichen:lichen-activiti (>=0.5.9, <=0.5.10.2), com.ganshane.lichen:lichen-creeper (>=0.5.9, <=0.5.10.2) +63 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.8.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ganshane.lichen:lichen-activiti =0.5.9, =0.5.9, =0.5.9,...

at.molindo:spring-data-custom (>=0.0.1, <=0.0.2), au.com.mountain-pass:hyperstate (>=1, <=3) +84 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom =0.0.1, =1, =1.4, =1.4, =0.0.7,...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +368 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.0.2, =1.0.2, =a.1.0.0,...

com.github.fangyanpg:spring-boot-ratelimiter (>=0.0.1-release, <=0.3.0-release), com.github.hushengte:disciples-feed (1.0.10) +53 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.22.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.fangyanpg:spring-boot-ratelimiter =0.0.1-release,...

io.github.divinespear:jpa-schema-gradle-plugin (>=0.1.7-1, <=0.1.10), io.github.jhipster.loaded:agent (>=0.2, <=0.12) +15 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.7.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - io.github.divinespear:jpa-schema-gradle-plugin =0.1.7-1, =0.2,...

cn.springcloud.gray:spring-cloud-gray-server (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-cluster-http-synchro-plugin (>=a.2.0.0.rc1, <=a.2.0.0) +171 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.23.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - cn.springcloud.gray:spring-cloud-gray-server =a.1.1.1,...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3946 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

com.aol.microservices:micro-data (>=0.65, <=0.69), com.aol.microservices:micro-hibernate (>=0.70, <=0.72) +69 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.aol.microservices:micro-data =0.65, =0.70, =0.69, =1.5.0,...

org.springframework.data:spring-cql (1.0.6.release), org.springframework.data:spring-data-cassandra (1.0.6.release) +13 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.8.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.0.6.release -...

com.lordofthejars:nosqlunit-mongodb (>=0.9.0, <=1.0.0), org.grails:grails-datastore-gorm-mongodb (>=3.0.2.release, <=3.1.5.release) +9 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.7.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.lordofthejars:nosqlunit-mongodb =0.9.0, =3.0.2.release,...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3946 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...