ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), ai.intelliswarm:swarmai-core (>=1.0.0, <=1.0.29) +3360 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-commons MAVEN version =3.4.0, =0.114.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =3.3.0, =0.5.8, =0.0.1, =0.0.1, =0.0.2 - be.jidoka:jdk-keycloak-admin 2.5.0 and more Source cves: CVE-2026-41711 Source advisory:...

com.github.darrachequesne:spring-data-jpa-datatables (>=1.0, <=2.6), com.github.lodsve:lodsve-mongodb (>=2.4.8, <=2.5.10) +61 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.10.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.10.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.darrachequesne:spring-data-jpa-datatables =1.0,...

EUVD-2026-35897

Applications using Spring Data Commons may be vulnerable to a Denial of Service DoS attack leading to a StackOverflowException when parsing Sort parameters. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +6072 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.0.0, <=3.3.13)

org.springframework.data:spring-data-commons MAVEN version =3.0.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41711 Source advisory: GHSA-5VPF-XVV7-C8VH...

com.github.micromix:micromix-compendium-crud (0.4), com.shigengyu:hyperion (0.0.1) +38 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.6.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.6.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.micromix:micromix-compendium-crud 0.4 -...

com.epam.reportportal:commons-bugtracking (2.7.0), com.epam.reportportal:commons-dao (>=2.7.0, <=2.7.1.1) +250 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.12.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.epam.reportportal:commons-bugtracking 2.7.0 -...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), ai.intelliswarm:swarmai-core (>=1.0.0, <=1.0.29) +3360 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-commons MAVEN version =3.4.0, =0.114.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =3.3.0, =0.5.8, =0.0.1, =0.0.1, =0.0.2 - be.jidoka:jdk-keycloak-admin 2.5.0 and more Source cves: CVE-2026-41711 Source advisory:...

org.springframework.data:spring-cql (1.5.21.release), org.springframework.data:spring-data-cassandra (1.5.21.release) +14 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.21.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.5.21.release -...

org.springframework.data:spring-cql (1.4.9.release), org.springframework.data:spring-data-cassandra (1.4.9.release) +13 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.12.9.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.4.9.release -...

com.github.spt-oss:spring-boot-starter-data-jpa-plus (>=0.1.0, <=0.2.0), com.hotels:circus-train (>=11.0.0, <=16.4.0) +39 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.11.5.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.spt-oss:spring-boot-starter-data-jpa-plus =0.1.0,...

com.4dconcept.springframework.data:spring-data-marklogic (>=1.2.2.release, <=1.3.5.release), com.foreach.imageserver:imageserver-admin (5.0.0.release) +76 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.17.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.4dconcept.springframework.data:spring-data-marklogic...

africa.absa:inception-codes (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.2.0) +11403 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=2.0.0.release, <=2.7.18)

org.springframework.data:spring-data-commons MAVEN version =2.0.0.release, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2026-41711 Source advisory: GHSA-5VPF-XVV7-C8VH...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +6072 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=3.0.0, <=3.3.13)

org.springframework.data:spring-data-commons MAVEN version =3.0.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41711 Source advisory: OSV:GHSA-5VPF-XVV7-C8VH...

org.dataone:d1_cn_common (2.3.0), org.sentilo.agent:sentilo-agent-activity-monitor (1.7.0) +10 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.6.5.release)

org.springframework.data:spring-data-commons MAVEN version 1.6.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.dataone:d1cncommon 2.3.0 -...

org.springframework.data:spring-cql (1.0.6.release), org.springframework.data:spring-data-cassandra (1.0.6.release) +13 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.8.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.8.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.0.6.release -...

com.sangupta:jerry-services (1.0.0), com.soterianetworks:spase-audit-es (>=0.9.45, <=0.9.59) +20 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.10.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.10.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.sangupta:jerry-services 1.0.0 -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=2.1, <=2.5), com.github.vencent-lu:giants-cache-redis (>=1.0.4, <=1.0.5-beta-7) +80 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.12.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base =2.1, =1.0.4, =2.2.1...

com.github.akiraly.reusable-poms:db4j (4), com.github.akiraly.reusable-poms:pom-parent-with-spring-hibernate-querydsl (4) +19 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.6.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.6.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.github.akiraly.reusable-poms:db4j 4 -...

at.researchstudio.sat:won-core (>=0.4, <=0.9), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +88 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.16.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.researchstudio.sat:won-core =0.4, =0.4, =0.4, =0.4, =0.4,...

org.springframework.amqp:spring-rabbit (1.1.2.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.1.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.1.2.release Source cves: CVE-2026-4170...