com.epam.reportportal:commons-dao (3.0.0), com.epam.reportportal:commons-rules (3.0.0) +185 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-dao 3.0.0 -...

org.resthub:resthub-mongodb (2.1.3), org.springframework.data:spring-data-mongodb-cross-store (1.2.4.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.2.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.resthub:resthub-mongodb 2.1.3 -...

be.appify.prefab:prefab-annotation-processor (>=0.7.0, <=0.10.9), be.appify.prefab:prefab-mongodb (>=0.5.0, <=0.10.9) +123 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=5.0.0, <=5.0.5)

org.springframework.data:spring-data-mongodb MAVEN version =5.0.0, =0.7.0, =0.5.0, =0.5.0, =4.0.0.0-m2, =4.0.0.0-m2, =1.0.1, =1.0.1, =3.0.0, =4.0.0, =4.3.1, =0.0.1, =0.0.2, =0.0.2, =1.0.4 - com.mzinx:mongodb-spring-materialized-view 1.0.0 and more Source cves: CVE-2026-41717 Source advisory:...

de.adorsys.multibanking:multibanking-persistence-mongodb (5.5.24), de.adorsys.multibanking:multibanking-server (5.5.24) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.20.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.adorsys.multibanking:multibanking-persistence-mongodb 5.5.2...

com.avides.springboot.springtainer:springtainer-mongodb (1.0.0), com.avides.springboot.testcontainer:springboot-testcontainer-mongodb (1.0.0-rc2) +19 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.avides.springboot.springtainer:springtainer-mongodb 1.0.0 -...

com.github.softbasic:micro-core (>=0.0.1, <=0.0.6), org.springframework.boot:spring-boot-starter-data-mongodb (2.0.7.release) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.12.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.softbasic:micro-core =0.0.1, =2.0.4.release,...

com.arhs-group:spring-cache-mongodb (>=1.0.0, <=1.0.1), com.bq.corbel.lib:mongodb (0.9.0) +36 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.arhs-group:spring-cache-mongodb =1.0.0, =1.0.1 -...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), cn.bbwres:biscuit-mongodb-boot-starter (>=3.0.0, <=3.0.2) +251 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=4.5.0, <=4.5.11)

org.springframework.data:spring-data-mongodb MAVEN version =4.5.0, =1.0.0.ee-20260424025040, =3.0.0, =3.5.0.0, =3.5.5.3, =3.5.5.3, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.5.2 and more Source cves: CVE-2026-41717 Source advisory:...

com.antelopesystem.crudframework:crud-framework-mongo-connector (>=0.1.0, <=0.5.0), com.antelopesystem.crudframework:crud-framework-utils (>=0.1.1, <=0.5.0) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.antelopesystem.crudframework:crud-framework-mongo-connecto...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.5.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.5.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

org.grails:gorm-mongodb-spring-boot (1.0.0.m1), org.grails:grails-datastore-gorm-mongodb (>=2.0.0.release, <=2.0.1.release) +1 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.4.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.grails:gorm-mongodb-spring-boot 1.0.0.m1 -...

io.gravitee.gateway.standalone:gravitee-gateway-standalone-container (>=0.2.0, <=0.7.0), io.gravitee.gateway.standalone:gravitee-gateway-standalone-distribution (>=0.2.0, <=0.7.0) +12 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.7.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

org.inigma.shared:inigma-shared (0.1), org.springframework.data:spring-data-mongodb-cross-store (1.0.4.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.0.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.inigma.shared:inigma-shared 0.1 -...

co.aurasphere.botmill:botmill-core (>=1.0.0, <=1.0.2), co.aurasphere.botmill:fb-botmill (>=2.0.0-rc1, <=2.0.0-rc3) +7 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.2.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - co.aurasphere.botmill:botmill-core =1.0.0, =2.0.0-rc1, =2.0.0,...

com.github.edgarespina:mwa-mongo (>=0.2.5, <=0.2.7), com.github.edgarespina:mwa-morphia (>=0.2.5, <=0.2.7) +18 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.0.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.edgarespina:mwa-mongo =0.2.5, =0.2.5, =0.3.0, =0.3.0...

org.springframework.data:spring-data-mongodb-cross-store (1.10.21.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.21.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.github.jknack:mwa-mongo (0.4.0), com.github.jknack:mwa-morphia (0.4.0) +1 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.2.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo 0.4.0 - com.github.jknack:mwa-morph...

com.bushidowallet:bushido-service-lib (>=1.0.0, <=1.0.3), com.github.camel-labs:camel-labs-iot-cloudlet-document-driver (0.1.0) +23 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.6.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.6.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bushidowallet:bushido-service-lib =1.0.0, =0.5.17, =1.14,...

EUVD-2026-35900

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

org.springframework.boot:spring-boot-starter-data-mongodb (1.5.21.release), org.springframework.data:spring-data-mongodb-cross-store (1.10.22.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.22.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...