org.springframework.amqp:spring-rabbit (1.1.2.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.1.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.1.2.release Source cves: CVE-2026-4170...

com.bluelock:camel-spring-amqp (>=1.6.2, <=1.6.3), org.resthub:spring-amqp-hessian (>=1.0.1, <=1.0.3) +2 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.2.0.release)

org.springframework.amqp:spring-amqp MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bluelock:camel-spring-amqp =1.6.2, =1.0.1, =3.0.0.release, =3.0.4.release...

cn.structured:structure-audit-application (v2.0.0), cn.structured:structure-audit-infra (v2.0.0) +98 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (>=4.0.0, <=4.0.3)

org.springframework.amqp:spring-amqp MAVEN version =4.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-41714 Source advisory: OSV:GHSA-P8QJ-FJ6R-W7Q9...

com.bluelock:camel-spring-amqp (>=1.3, <=1.4), org.springframework.amqp:spring-rabbit (1.1.1.release) potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.1.1.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bluelock:camel-spring-amqp =1.3, =1.4 -...

org.resthub:spring-amqp-hessian (1.0.0), org.springframework.amqp:spring-rabbit (1.1.3.release) +1 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.1.3.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.resthub:spring-amqp-hessian 1.0.0 - org.springframework.amqp:spring-rabbit...

cn.structured:structure-audit-application (v2.0.0), cn.structured:structure-audit-infra (v2.0.0) +98 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (>=4.0.0, <=4.0.3)

org.springframework.amqp:spring-amqp MAVEN version =4.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-41701 Source advisory: OSV:GHSA-P5F7-RJHP-PXVC...

org.springframework.amqp:spring-rabbit (1.3.0.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.3.0.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.3.0.release Source cves: CVE-2026-4170...

org.springframework.amqp:spring-rabbit (1.1.0.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.1.0.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.1.0.release Source cves: CVE-2026-4170...

org.springframework.amqp:spring-rabbit (1.1.2.release) potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.1.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.1.2.release Source cves: CVE-2026-4171...

org.springframework.amqp:spring-rabbit (1.5.4.release), org.springframework.boot:spring-boot-starter-amqp (1.3.3.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.5.4.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.5.4.release -...

ba.jamax.util:jamax-rest (>=1.3.1-release, <=1.3.4-release), com.erudika:para-server (1.13) +16 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.0.0.release)

org.springframework.security:spring-security-web MAVEN version 4.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - ba.jamax.util:jamax-rest =1.3.1-release, =2.5.2, =3.3.0...

org.springframework.boot:spring-boot-starter-data-jdbc (>=2.2.12.release, <=2.2.13.release), org.springframework.data:spring-data-jdbc (1.1.12.release) potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.12.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - org.springframework.boot:spring-boot-starter-data-jdbc...

cn.cenxt:cenxt-task-scheduler-core (>=0.0.1, <=1.0.5), com.github.jchanghong:parent (>=3.0.11, <=3.0.19) +6 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.3.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - cn.cenxt:cenxt-task-scheduler-core =0.0.1, =3.0.11,...

com.foilen:database-tools (0.4.4), org.nhind:config-service-jar (>=7.0, <=7.0.1) +3 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.4.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.foilen:database-tools 0.4.4 -...

org.springframework.data:spring-data-jdbc (1.1.13.release) potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.13.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - org.springframework.data:spring-data-jdbc 1.1.13.release...

GHSA-8R2H-XH92-GQ57 Spring Data Relational: Attackers can supply wildcard characters to perform boolean-based blind data inference

Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher STARTING, ENDING, or CONTAINING in Query By Example QBE. An attacker can supply wildcard characters to perform boolean-based blind data inference. Affected versions: Spring Data...

com.xieahui.springboot:spring-boot-easy-connection-pool (>=1.0-release, <=1.1.2-release), org.springframework.boot:spring-boot-starter-data-jdbc (2.2.7.release) +2 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.7.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.xieahui.springboot:spring-boot-easy-connection-pool...

com.github.jchanghong:test (2.2.6), com.github.jchanghong:utils (2.2.6) +2 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.6.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.github.jchanghong:test 2.2.6 -...

cn.fxbin.bubble:bubble-fireworks-data-mybatis (0.0.3-release), cn.fxbin.bubble:bubble-fireworks-starter-mybatis (0.0.3-release) +2 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.8.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - cn.fxbin.bubble:bubble-fireworks-data-mybatis 0.0.3-relea...

ch.nexsol-tech.gateway:sample-gateway (>=0.0.1, <=1.1.0), ch.nexsol-tech.gateway:spring-cloud-gateway-database (>=0.0.1, <=1.1.0) +610 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-relational MAVEN version =3.4.0, =0.0.1, =0.0.1, =2.0.0-release, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =2.51.0 and more Source cves: CVE-2026-41697 Source advisory: GHSA-8R2H-XH92-GQ57https://vulners.com/github/GHSA-8R...