am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0), am.ik.home:uaa-client (1.9.0) +316 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - am.ik.blog:blog-mapper =4.0.0, =1.0.2.release, =1.2.0-alpha3,...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.0.0.beta.ee-20220401222842, <=11.2.6.ee), io.spinnaker.gate:gate-api-tck (>=6.63.0, <=6.69.0) +8 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=5.6.2, <=5.7.11)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.6.2, =11.0.0.beta.ee-20220401222842, =6.63.0, =6.63.0, =6.63.0, =1.17.0, =1.17.0, =5.26.0, =5.26.0, =0.6.4-b, =0.7.0 - zone.cogni.lib.security:security 1.2.5 Source cves: CVE-2026-40988 Source advisory:...

org.springframework.data:spring-data-mongodb-cross-store (2.1.7.release), org.springframework.integration:spring-integration-mongodb (5.1.5.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.7.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.sharethis:mongomigration (1.0.0), org.resthub:resthub-mongodb (>=2.1.4, <=2.1.6) +1 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.3.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.sharethis:mongomigration 1.0.0 - org.resthub:resthub-mongod...

org.resthub:resthub-mongodb (2.1.3), org.springframework.data:spring-data-mongodb-cross-store (1.2.4.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.2.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.resthub:resthub-mongodb 2.1.3 -...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +237 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - au.com.mountain-pass:hyperstate-client =1, =1, =1, =1, =1,...

com.bushidowallet:bushido-address-watcher (1.0.3), com.bushidowallet:bushido-wallet-service (1.0.3) +89 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.5.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bushidowallet:bushido-address-watcher 1.0.3 -...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.persistence:cloud-altemistafwk-core-persistence-mongodb-conf (3.1.0.release) +53 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cloud.altemista.fwk.framework:cloud-altemistafwk-documentation...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.persistence:cloud-altemistafwk-core-persistence-mongodb-conf (3.1.0.release) +53 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.2.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cloud.altemista.fwk.framework:cloud-altemistafwk-documentation...

com.eurodyn.qlack.util:qlack-util-data-mongo (>=3.0.0, <=3.1.2), com.github.eagle6688:devutility.external.mongo (>=2.1.4, <=2.1.5) +37 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.eurodyn.qlack.util:qlack-util-data-mongo =3.0.0, =2.1.4,...

org.pac4j:spring-security-pac4j (>=1.2.3, <=1.2.4), org.springframework.security:spring-security-cas (3.2.2.release) +3 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.2.2.release)

org.springframework.security:spring-security-web MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.pac4j:spring-security-pac4j =1.2.3, =1.2.4 -...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.1.1, <=0.112.0), ai.driftkit:driftkit-context-engineering-services (>=0.7.9, <=0.9.2) +3273 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (>=3.3.0, <=3.3.13)

org.springframework.data:spring-data-commons MAVEN version =3.3.0, =0.1.1, =0.7.9, =0.6.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-41716 Source advisory: GHSA-9FW2-H3HF-293R...

com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.0.0.beta.ee-20220401222842, <=11.2.6.ee), io.spinnaker.gate:gate-api-tck (>=6.63.0, <=6.69.0) +8 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=5.6.2, <=5.7.11)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =5.6.2, =11.0.0.beta.ee-20220401222842, =6.63.0, =6.63.0, =6.63.0, =1.17.0, =1.17.0, =5.26.0, =5.26.0, =0.6.4-b, =0.7.0 - zone.cogni.lib.security:security 1.2.5 Source cves: CVE-2026-41694 Source advisory:...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-40988 Source advisory: OSV:GHSA-M69X-PW9P-7J3Q...

cn.dev8:ktmyoql (>=0.1.0, <=0.1.8), com.avides.springboot.testcontainer:springboot-testcontainer-mongodb (1.0.0-rc1) +14 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.dev8:ktmyoql =0.1.0, =4.0.0, =0.8.6, =0.0.2,...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.2.0-rc4, <=5.3.0-rc3), org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=5.3.0-rc4, <=5.3.16) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.6.11.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-amqp =5.2.0-rc4, =5.3.0-rc4...

au.com.mountain-pass:hyperstate (>=4, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +291 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.11.4.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.9.0-alpha, =0.9.0-alpha...

com.ahome-it:ahome-tooling-server-core (1.1.0-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.0-release) +151 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.5.6.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.1.0-release -...

com.sangupta:jerry-services (1.0.0), in.clouthink.daas:daas-bm-mongodb (>=1.0.0, <=1.0.3) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.7.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.sangupta:jerry-services 1.0.0 -...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), br.com.itsme:commons (>=0.0.4-alpha, <=0.0.5-alpha) +944 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (>=2.0.0.release, <=2.4.17)

org.springframework.amqp:spring-amqp MAVEN version =2.0.0.release, =0.5.0, =0.0.4-alpha, =0.1.0.beta, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =1.2.0-release, =1.0.1, =1.0.0, =2.1.0 and more Source cves: CVE-2026-41701 Source advisory: OSV:GHSA-P5F7-RJHP-PXVC...