com.aol.microservices:micro-data (>=0.62, <=0.64), com.aol.microservices:microserver-data (>=0.60, <=0.61) +127 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.9.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.9.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.aol.microservices:micro-data =0.62, =0.60, =1.0.0,...

io.github.divinespear:jpa-schema-gradle-plugin (>=0.1.7-1, <=0.1.10), io.github.jhipster.loaded:agent (>=0.2, <=0.12) +15 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.7.0.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - io.github.divinespear:jpa-schema-gradle-plugin =0.1.7-1, =0.2,...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +3955 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-commons MAVEN version =3.5.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

ch.sharedvd.tipi:tipi-engine (>=1.0.5, <=1.1.9), cn.easyproject:easyshiro-redis-cache (2.6.0-release) +184 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.9.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ch.sharedvd.tipi:tipi-engine =1.0.5, =1.0.0-release,...

com.foreach.across.modules:across-hibernate-module (1.1.1.release), com.github.vineey:rsql-querydsl-spring (>=1.0.0.release, <=2.0.0.release) +57 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.9.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.9.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.foreach.across.modules:across-hibernate-module 1.1.1.releas...

au.com.mountain-pass:hyperstate (>=4, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +291 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.11.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.9.0-alpha, =0.9.0-alpha...

app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2326 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41711 Source advisory: GHSA-5VPF-XVV7-C8VH...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.0.0, <=3.4.0) +391 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 -...

org.springframework.data:spring-cql (1.5.2.release), org.springframework.data:spring-data-cassandra (1.5.2.release) +14 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.5.2.release -...

com.github.akiraly.reusable-poms:pom-parent-with-spring-hibernate-querydsl (3), com.github.akiraly.reusable-poms:pom-parent-with-spring-hibernate-querydsl-core (3) +41 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.6.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.6.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: -...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +237 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.12.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - au.com.mountain-pass:hyperstate-client =1, =1, =1, =1, =1,...

com.gitee.sunlu:zm-cloud-biz (1.0.0), com.gitee.sunlu:zm-cloud-commons (1.0.0) +7 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.6.6.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.gitee.sunlu:zm-cloud-biz 1.0.0 - com.gitee.sunlu:zm-cloud-commons 1.0.0 -...

com.avides.spring:spring-amqp-utils (1.0.0.release), com.github.jingxiaohu:platform_base (1.0.0) +108 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.4.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.avides.spring:spring-amqp-utils 1.0.0.release -...

br.jus.stf.digital:core (>=2.0.0, <=2.3.1), com.ecfront.dew:logger (>=1.1.0, <=1.1.4) +78 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.1.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - br.jus.stf.digital:core =2.0.0, =1.1.0, =1.1.0, =1.0.2-release, =1.0.5-release,...

com.navercorp.pinpoint:pinpoint-rabbitmq-plugin (>=2.3.0, <=3.1.0), com.societegenerale.ci-droid.tasks-consumer:ci-droid-tasks-consumer-autoconfigure (>=1.0.1, <=1.0.12) +20 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.6.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.navercorp.pinpoint:pinpoint-rabbitmq-plugin =2.3.0, =1.0.1, =1.0.0, =1.0.1,...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (a.1.1.0.release), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (a.1.1.0) +19 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.3.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream a.1.1.0.release -...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.2.0-rc4, <=5.3.0-rc3), org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=5.3.0-rc4, <=5.3.16) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.6.11.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-amqp =5.2.0-rc4, =5.3.0-rc4...

cn.springcloud.gray:spring-cloud-gray-server (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-cluster-http-synchro-plugin (>=a.2.0.0.rc1, <=a.2.0.0) +171 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.23.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - cn.springcloud.gray:spring-cloud-gray-server =a.1.1.1,...

com.github.lodsve:lodsve-amqp (>=2.4.8, <=2.5.7), org.springframework.amqp:spring-rabbit (1.5.3.release) +1 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.5.3.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.lodsve:lodsve-amqp =2.4.8, =2.5.7 -...

org.springframework.boot:spring-boot-starter-data-mongodb (1.3.8.release), org.springframework.data:spring-data-mongodb-cross-store (1.8.5.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.8.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...