org.springframework.cloud:spring-cloud-starter-stream-kafka11 (1.3.0.release), org.springframework.cloud:spring-cloud-stream-binder-kafka-0.11-test (1.3.0.release) +5 more potentially affected by CVE-2026-41731 via org.springframework.kafka:spring-kafka (1.3.0.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.cloud:spring-cloud-starter-stream-kafka11 1.3.0.release...

de.idealo.kafka:kafka-encryption (0.1-20180118), de.idealo.kafka:kafka-encryption-demo-app (>=0.1-20180111, <=0.1-20180118) +1 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.3.2.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - de.idealo.kafka:kafka-encryption 0.1-20180118 -...

org.springframework.integration:spring-integration-kafka (2.3.1.release) potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.3.10.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - org.springframework.integration:spring-integration-kafka 2.3.1.release...

com.epam.reportportal:commons-bugtracking (2.7.0), com.epam.reportportal:commons-dao (>=2.7.0, <=2.7.1.1) +250 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.epam.reportportal:commons-bugtracking 2.7.0 -...

at.molindo:spring-data-custom (0.1.0), com.aol.microservices:micro-dbcp (>=0.90, <=0.91.11) +213 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.5.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom 0.1.0 -...

am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +110 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =1.0.1, =3.0.1.3...

cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39), cn.jiangzeyin:common-redis (>=1.0.0, <=1.0.3) +57 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.11.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - cn.jiangzeyin.fast-boot:common-redis =1.0.3, =1.0.0, =0.0.1,...

ch.sharedvd.tipi:tipi-engine (>=1.0.5, <=1.1.9), cn.easyproject:easyshiro-redis-cache (2.6.0-release) +184 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.9.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ch.sharedvd.tipi:tipi-engine =1.0.5, =1.0.0-release,...

ch.sharedvd.tipi:tipi-engine (>=1.1.10, <=1.1.11), com.actionsky:txle-autocompensation (>=2.19.10.0, <=2.19.11.0) +100 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.13.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ch.sharedvd.tipi:tipi-engine =1.1.10, =2.19.10.0, =2.19.10.0,...

com.anbai:ab-elasticsearch (7.0.0), com.blazebit:blaze-persistence-examples-showcase-fragments-spring-data (1.6.7) +74 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.20.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.anbai:ab-elasticsearch 7.0.0 -...

com.github.fangyanpg:spring-boot-ratelimiter (>=0.0.1-release, <=0.3.0-release), com.github.hushengte:disciples-feed (1.0.10) +53 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.22.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.fangyanpg:spring-boot-ratelimiter =0.0.1-release,...

africa.absa:inception-codes (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +11403 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (>=2.0.0.release, <=2.7.18)

org.springframework.data:spring-data-commons MAVEN version =2.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2026-41721 Source advisory: GHSA-5M4M-73W9-8433...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.1, <=2.5), com.github.vencent-lu:giants-cache-redis (>=1.0.4, <=1.0.5-beta-7) +80 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.1, =1.0.4, =2.2.1...

com.epam.reportportal:commons-bugtracking (3.0.0), com.github.haosenwei:g4m-com (1.0-releases) +64 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.8.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.epam.reportportal:commons-bugtracking 3.0.0 -...

am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0), am.ik.home:uaa-client (1.9.0) +316 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - am.ik.blog:blog-mapper =4.0.0, =1.0.2.release, =1.2.0-alpha3,...

cn.yueshutong:spring-boot-starter-current-limiting (>=0.0.7.release, <=0.0.8.release), com.4dconcept.springframework.data:spring-data-marklogic (1.2.1.release) +137 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.12.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - cn.yueshutong:spring-boot-starter-current-limiting...

com.4dconcept.springframework.data:spring-data-marklogic (>=1.2.2.release, <=1.3.5.release), com.foreach.imageserver:imageserver-admin (5.0.0.release) +76 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.17.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.4dconcept.springframework.data:spring-data-marklogic...

at.molindo:spring-data-custom (>=0.0.1, <=0.0.2), au.com.mountain-pass:hyperstate (>=1, <=3) +84 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom =0.0.1, =1, =1.4, =1.4, =0.0.7,...

au.com.mountain-pass:hyperstate (>=4, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +291 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.9.0-alpha, =0.9.0-alpha...

com.sksamuel.elasticsearch:elasticsearch-river-neo4j (>=0.90.7.0, <=0.90.9.0), org.springframework.data:spring-cql (1.3.6.release) +15 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.11.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.sksamuel.elasticsearch:elasticsearch-river-neo4j =0.90.7.0...