com.epam.reportportal:commons-bugtracking (3.0.0), com.github.haosenwei:g4m-com (1.0-releases) +64 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.8.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.epam.reportportal:commons-bugtracking 3.0.0 -...

am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0), am.ik.home:uaa-client (1.9.0) +316 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - am.ik.blog:blog-mapper =4.0.0, =1.0.2.release, =1.2.0-alpha3,...

cn.yueshutong:spring-boot-starter-current-limiting (>=0.0.7.release, <=0.0.8.release), com.4dconcept.springframework.data:spring-data-marklogic (1.2.1.release) +137 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.12.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - cn.yueshutong:spring-boot-starter-current-limiting...

com.4dconcept.springframework.data:spring-data-marklogic (>=1.2.2.release, <=1.3.5.release), com.foreach.imageserver:imageserver-admin (5.0.0.release) +76 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.17.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.4dconcept.springframework.data:spring-data-marklogic...

at.molindo:spring-data-custom (>=0.0.1, <=0.0.2), au.com.mountain-pass:hyperstate (>=1, <=3) +84 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom =0.0.1, =1, =1.4, =1.4, =0.0.7,...

au.com.mountain-pass:hyperstate (>=4, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +291 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.9.0-alpha, =0.9.0-alpha...

com.sksamuel.elasticsearch:elasticsearch-river-neo4j (>=0.90.7.0, <=0.90.9.0), org.springframework.data:spring-cql (1.3.6.release) +15 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.sksamuel.elasticsearch:elasticsearch-river-neo4j =0.90.7.0...

com.thinkbiganalytics.kylo.plugins:kylo-hadoop-authorization-ranger (>=0.8.3, <=0.9.1), com.thinkbiganalytics.kylo.plugins:kylo-ranger-rest-client (>=0.8.3, <=0.9.1) +33 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (1.0.4), org.dspace:dspace-spring-rest (7.0-preview-1) +30 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.7.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: -...

at.researchstudio.sat:won-core (>=0.4, <=0.9), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +88 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.16.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.researchstudio.sat:won-core =0.4, =0.4, =0.4, =0.4, =0.4,...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3955 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +237 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - au.com.mountain-pass:hyperstate-client =1, =1, =1, =1, =1,...

at.researchstudio.sat:won-core (>=0.2, <=0.3), at.researchstudio.sat:won-cryptography (0.3) +175 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.researchstudio.sat:won-core =0.2, =0.2, =0.2, =0.2, =0.2,...

biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +368 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.0.2, =1.0.2, =a.1.0.0,...

com.arpit9mittal.fmk:common-application-framework-core (>=1.0.0-rc1, <=1.0.0-rc2), com.arpit9mittal.fmk:common-application-framework-parent (>=1.0.0-rc1, <=1.0.0-rc2) +162 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.11.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.arpit9mittal.fmk:common-application-framework-core...

com.4dconcept.springframework.data:spring-data-marklogic (>=1.3.0.rc1, <=1.3.0.release), com.arcadeanalytics:arcadeanalytics (>=1.0.2, <=1.0.8) +48 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.14.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.4dconcept.springframework.data:spring-data-marklogic...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3955 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

com.soterianetworks:spase-audit (>=0.9.27, <=0.9.59), org.resthub:resthub-common (2.1.3) +12 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.5.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.5.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.soterianetworks:spase-audit =0.9.27, =0.9.59 -...

com.highway2urhell:h2hell-web (>=1.0.1, <=1.0.5), io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.beta6, <=1.1.0.cr1) +24 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.7.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.highway2urhell:h2hell-web =1.0.1, =1.1.0.beta6, =1.1.0.beta...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +66 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.8.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =4.0....