com.github.surpassm:liaoin-security-app (0.0.1.release), com.github.surpassm:liaoin-security-core (0.0.1.release) +11 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.14.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.github.surpassm:liaoin-security-app 0.0.1.release -...

com.epam.reportportal:commons-bugtracking (3.0.0), com.github.haosenwei:g4m-com (1.0-releases) +3 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.8.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.epam.reportportal:commons-bugtracking 3.0.0 -...

cn.sylinx:redis-spring-boot-starter (>=1.0.1, <=1.0.2), com.17jee:e-cache-hibernate-redis (>=3.0.1.9, <=3.0.1.11) +12 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.6.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.sylinx:redis-spring-boot-starter =1.0.1, =3.0.1.9, =3.0.1....

cn.net.vidyo:jsmth-data (3.3.120.release), com.github.vencent-lu:giants-cache-redis (>=1.0.4, <=1.0.5-beta-7) +4 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.4.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.net.vidyo:jsmth-data 3.3.120.release -...

ai.hyacinth.framework:core-service-cache-support (>=0.5.0, <=0.5.5), ai.hyacinth.framework:core-service-gateway-server (>=0.5.0, <=0.5.24) +5020 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=2.0.0.release, <=2.7.18)

org.springframework.data:spring-data-keyvalue MAVEN version =2.0.0.release, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =2.0.1.release, =1.1.0.release, =1.0.3.release, =1.0.0, =1.0.6, =0.5.0, =0.1.0, =0.3.0, =0.5.0, =0.8.0 and more Source cves: CVE-2026-41719 Source advisory:...

GHSA-XG2J-3HJ6-PC24 Spring Data KeyValue: Remote code execution via SpEL Injection in Sort-based repository queries

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through...

com.aerospike:spring-data-aerospike (>=1.0.2.release, <=1.1.1.release), com.aerospike:spring-session-aerospike (1.0.0.release) +38 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.1.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.aerospike:spring-data-aerospike =1.0.2.release, =1.1.0,...

br.com.sawcunhaos:scos-foundation-audit (>=1.0.0, <=1.1.0), br.com.sawcunhaos:scos-foundation-exception (>=1.0.0, <=1.1.0) +455 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-keyvalue MAVEN version =4.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =6.0.1, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m2, =4.0.0.0-m3 and more Source cves: CVE-2026-41719 Source advisory:...

org.springframework.data:spring-data-redis (1.8.21.release) potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.21.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - org.springframework.data:spring-data-redis 1.8.21.release...

be.ordina:microservices-dashboard-server (1.0.1), cn.m1c.lannie:m1c-lannie-common (>=1.0.0-release, <=1.0.6.6-release) +21 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.2.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - be.ordina:microservices-dashboard-server 1.0.1 -...

com.github.skyding228:spring-session-redis (1.0), net.mingsoft:ms-base (>=1.0.3, <=1.0.8) +14 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.10.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.github.skyding228:spring-session-redis 1.0 -...

cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39), cn.jiangzeyin:common-redis (>=1.0.0, <=1.0.3) +15 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.11.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - cn.jiangzeyin.fast-boot:common-redis =1.0.3, =1.0.0, =0.0.1,...

org.springframework.boot:spring-boot-starter-data-redis (1.4.4.release), org.springframework.boot:spring-boot-starter-redis (1.4.4.release) +2 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.7.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - org.springframework.boot:spring-boot-starter-data-redis...

com.github.upers:betexdao (>=1.0.0, <=1.2.7), com.nepxion:discovery-common-redis (>=edgware.1.0.0, <=3.14.0) +13 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.17.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.github.upers:betexdao =1.0.0, =edgware.1.0.0,...

com.wueasy:wueasy-base-web (>=1.2.0, <=1.3.3), com.wueasy:wueasy-gateway (>=1.4.0, <=1.4.2) +11 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.18.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.wueasy:wueasy-base-web =1.2.0, =1.4.0, =1.3.0,...

org.springframework.data:spring-data-redis (1.7.9.release) potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.1.9.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - org.springframework.data:spring-data-redis 1.7.9.release Sour...

com.chaoxing:redis-distribute-lock-spring-boot-starter (1.0.0), com.codingapi:sds-delivery (2.0.2) +45 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.10.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.chaoxing:redis-distribute-lock-spring-boot-starter 1.0.0...

ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-agentic-factory (>=1.2.4, <=1.2.6) +1038 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-keyvalue MAVEN version =3.5.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - cc.uncarbon.framework:helio-starter-rate-limit-redis 2.5.0 - cc.uncarbon.framework:helio-starter-redis 2.5...

org.springframework.boot:spring-boot-starter-data-redis (1.5.5.release), org.springframework.data:spring-data-redis (1.8.5.release) +1 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.5.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - org.springframework.boot:spring-boot-starter-data-redis...

com.ueboot:ueboot-generator (2.2.0), com.ueboot:ueboot-shiro (2.2.0) +14 more potentially affected by CVE-2026-41719 via org.springframework.data:spring-data-keyvalue (1.2.15.release)

org.springframework.data:spring-data-keyvalue MAVEN version 1.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-keyvalue and may be impacted: - com.ueboot:ueboot-generator 2.2.0 - com.ueboot:ueboot-shiro...