com.avides.springboot.springtainer:springtainer-mongodb (1.0.0), com.avides.springboot.testcontainer:springboot-testcontainer-mongodb (1.0.0-rc2) +19 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.avides.springboot.springtainer:springtainer-mongodb 1.0.0 -...

org.springframework.amqp:spring-rabbit (1.5.7.release), org.springframework.integration:spring-integration-amqp (4.2.13.release) potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.5.7.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.5.7.release -...

com.lordofthejars:nosqlunit-mongodb (>=0.9.0, <=1.0.0), org.grails:grails-datastore-gorm-mongodb (>=3.0.2.release, <=3.1.5.release) +9 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.7.3.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.lordofthejars:nosqlunit-mongodb =0.9.0, =3.0.2.release,...

at.molindo:spring-data-custom (1.0.0), cn.patterncat:job-event-store-elasticsearch (0.0.2) +42 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.10.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - at.molindo:spring-data-custom 1.0.0 -...

ch.sahits.game:openpatriciantest (>=0.9.1-rc1, <=0.9.1), cn.minsin:mutils-data-mongodb (>=0.0.2.release, <=0.4.0.release) +14 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.5.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =0.9.1-rc1, =0.0.2.release,...

com.addc:addc-web-mvc (2.5), com.addc:addc-web-struts12 (2.5) +168 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.4.release)

org.springframework.security:spring-security-web MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.addc:addc-web-mvc 2.5 - com.addc:addc-web-struts12...

Spring Security OAuth2 Authorization Server: Authorization endpoint performs insufficient validation of the request_uri parameter

Spring Security Authorization Server's authorization endpoint performs insufficient validation of the requesturi parameter. An attacker can craft a malicious authorization request containing an invalid requesturi and an arbitrary, unvalidated redirecturi, which can lead to an Open Redirect...

EUVD-2026-35888

Spring Security Authorization Server's authorization endpoint performs insufficient validation of the requesturi parameter. An attacker can craft a malicious authorization request containing an invalid requesturi and an arbitrary, unvalidated redirecturi, which can lead to an Open Redirect...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.1.0-rc4, <=5.1.9), org.springframework.amqp:spring-rabbit (1.6.8.release) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.6.8.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-amqp =5.1.0-rc4,...

cn.jiangzeyin.fast-boot:common-redis (>=1.0.3, <=1.2.39), cn.jiangzeyin:common-redis (>=1.0.0, <=1.0.3) +57 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.12.11.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - cn.jiangzeyin.fast-boot:common-redis =1.0.3, =1.0.0, =0.0.1,...

com.highway2urhell:h2hell-web (>=1.0.1, <=1.0.5), io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.beta6, <=1.1.0.cr1) +24 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.7.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.highway2urhell:h2hell-web =1.0.1, =1.1.0.beta6, =1.1.0.beta...

com.epages:restdocs-api-spec-webtestclient (>=0.20.0, <=0.20.2) potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-webtestclient (4.0.0)

org.springframework.restdocs:spring-restdocs-webtestclient MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.restdocs:spring-restdocs-webtestclient and may be impacted: - com.epages:restdocs-api-spec-webtestclient...

co.paralleluniverse:comsat-spring-boot-security (0.7.0), co.paralleluniverse:comsat-spring-security (0.7.0) +226 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.0.4.release)

org.springframework.security:spring-security-web MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - co.paralleluniverse:comsat-spring-boot-security 0.7.0 -...

org.kurento:kurento-rabbitmq (>=6.0.0, <=6.1.0), org.springframework.amqp:spring-rabbit (1.4.1.release) +2 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.4.1.release)

org.springframework.amqp:spring-amqp MAVEN version 1.4.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.kurento:kurento-rabbitmq =6.0.0, =6.1.0 -...

com.epam.reportportal:commons-bugtracking (3.0.0), io.gravitee.am.gateway.handlers:gravitee-am-gateway-handlers (>=1.0.0, <=1.3.0) +13 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.8.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking 3.0.0 -...

com.github.eagle6688:devutility.external (>=1.0, <=1.0.4), org.springframework.data:spring-data-mongodb-cross-store (2.0.4.release) +2 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.eagle6688:devutility.external =1.0, =2.0.1.release,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.0.0, <=3.4.0) +391 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.6.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 -...

com.cedac.spring.security:spring-security-mongodb (1.0.0), com.devonfw.modules:devonfw-winauth-ad (>=2.4.0, <=3.1.0) +90 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.2.7.release)

org.springframework.security:spring-security-web MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.cedac.spring.security:spring-security-mongodb 1.0.0...

com.ibm.cloud:amqp-mongo-example (0.0.4), com.ibm.cloud:amqp-mongo-kafka (>=0.0.5, <=1.0) +28 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.0.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.ibm.cloud:amqp-mongo-example 0.0.4 -...

com.epam.reportportal:commons-bugtracking (2.7.0), com.epam.reportportal:commons-dao (>=2.7.0, <=2.7.1.1) +128 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.3.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.epam.reportportal:commons-bugtracking 2.7.0 -...