com.lordofthejars:nosqlunit-mongodb (>=0.9.0, <=1.0.0), org.grails:grails-datastore-gorm-mongodb (>=3.0.2.release, <=3.1.5.release) +1 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.4.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.lordofthejars:nosqlunit-mongodb =0.9.0, =3.0.2.release,...

com.airlenet:play-repo-mongo (2.0.0), com.bol:spring-data-mongodb-encrypt (>=1.0, <=1.3.0) +190 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.airlenet:play-repo-mongo 2.0.0 -...

com.epam.reportportal:commons-bugtracking (4.2.0), com.github.mujun0312:zxspace-booster-build (>=1.0.1.release, <=1.0.3.release) +25 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.10.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking 4.2.0 -...

com.avides.springboot.testcontainer:springboot-testcontainer-mongodb (0.1.0-rc5), com.github.eagle6688:devutility.external.mongo (2.0.6.5) +35 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

org.craftercms:crafter-social (2.3.6), org.grails:gorm-mongodb-spring-boot (>=1.0.0.rc2, <=1.0.0.release) +7 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.4.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.4.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.craftercms:crafter-social 2.3.6 -...

com.github.liaomengge:base-dubbo-framework (2.0.5-release), com.github.liaomengge:base-dubbo-framework-mapper (2.0.5-release) +23 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.11.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.liaomengge:base-dubbo-framework 2.0.5-release -...

in.clouthink.daas:daas-bm-core (>=1.0.0, <=1.0.3), in.clouthink.daas:daas-bm-mongodb (>=1.0.0, <=1.0.3) +28 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.7.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - in.clouthink.daas:daas-bm-core =1.0.0, =1.0.0, =3.0.1, =1.0.0,...

io.eventuate.tram.view.support:eventuate-tram-view-support-e2e-tests (>=0.3.0.release, <=0.5.0.release), io.github.daggerok:distributed-lock-mongodb (2.1.1) +30 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

com.bol:spring-data-mongodb-encrypt (>=2.3.1, <=2.3.2), de.digitalcollections:iiif-bookshelf-webapp (4.0.0) +8 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.11.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.bol:spring-data-mongodb-encrypt =2.3.1, =2.3.2 -...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), cn.craccd:mongohelper (1.0.0) +272 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=4.4.0, <=4.4.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.4.0, =0.114.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.6.0 and more Source cves: CVE-2026-41717 Source advisory: OSV:GHSA-5WHC-4Q84-FJ73...

com.bluelock:camel-spring-amqp (>=1.6.2, <=1.6.3), org.resthub:spring-amqp-hessian (>=1.0.1, <=1.0.3) +2 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.2.0.release)

org.springframework.amqp:spring-amqp MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bluelock:camel-spring-amqp =1.6.2, =1.0.1, =3.0.0.release, =3.0.4.release...

ch.admin.bit.jeap:jeap-oauth-mock-server (>=3.10.0, <=3.49.0), ch.admin.bit.jeap:jeap-oauth-mock-server-instance (>=3.10.0, <=3.49.0) +47 more potentially affected by CVE-2026-41008 via org.springframework.security:spring-security-oauth2-authorization-server (>=1.5.0, <=1.5.7)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version =1.5.0, =3.10.0, =3.10.0, =1.0.0, =1.0.1, =1.0.0, =3.0.0, =3.5.5.3, =3.5.5.3, =3.5.0.0, =3.5.5.3, =3.5.5.3, =3.5.5.3, =3.5.0.0, =3.5.0.0, =3.5.5.2 and more Source cves: CVE-2026-41008 Source advisory:...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), cn.bbwres:biscuit-mongodb-boot-starter (>=3.0.0, <=3.0.2) +251 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=4.5.0, <=4.5.11)

org.springframework.data:spring-data-mongodb MAVEN version =4.5.0, =1.0.0.ee-20260424025040, =3.0.0, =3.5.0.0, =3.5.5.3, =3.5.5.3, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.0.0, =3.5.5.2 and more Source cves: CVE-2026-41717 Source advisory:...

net.dreamlu:mica-plus-mongo (1.2.2), org.springframework.boot:spring-boot-starter-data-mongodb (2.1.13.release) +13 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.16.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - net.dreamlu:mica-plus-mongo 1.2.2 -...

org.springframework.data:spring-data-mongodb-cross-store (1.10.2.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.10.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.10.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.github.lkqm:spring-data-mongodb-extends (0.1.0), io.flamingock:mongodb-springdata-v2-driver (>=0.0.10-beta, <=0.0.32-beta) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.13.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.lkqm:spring-data-mongodb-extends 0.1.0 -...

cloud.wondrify:grails-rabbit-amqp-plugin (7.0.0), cn.hiapi:hiapi-core-application (1.0.8) +374 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (>=3.2.0, <=3.2.10)

org.springframework.amqp:spring-amqp MAVEN version =3.2.0, =2.0.1, =1.0.1-jdk21, =3.5.5, =3.5.0-jdk17-1.0.0, =0.7.0, =0.7.0, =0.2.0, =0.1.0-beta.1, =0.1.0 - com.buession.cas:cas-server-support-logging 4.0.0 and more Source cves: CVE-2026-41701 Source advisory: OSV:GHSA-P5F7-RJHP-PXVC...

com.github.krraghavan:mongodb-aggregate-query-support (>=0.7.1, <=0.7.17), org.apereo.cas:cas-server-core-api (5.1.0-rc2) +31 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.krraghavan:mongodb-aggregate-query-support =0.7.1,...

be.looorent:spring-security-jwt (>=0.1, <=0.8), br.jus.stf.digital:core (0.1.0) +48 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.1.1.release)

org.springframework.security:spring-security-web MAVEN version 4.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - be.looorent:spring-security-jwt =0.1, =1.0.0-rc, =0.5.0...

com.bluejeans:ipc-channel-utils (>=1.0, <=1.0.1), com.kurento.kmf:kmf-broker (4.3.1) +4 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.3.5.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bluejeans:ipc-channel-utils =1.0, =5.0.3, =1.1.4.release, =1.1.6.release -...