cn.cenxt:cenxt-task-scheduler-core (>=0.0.1, <=1.0.5), com.github.jchanghong:parent (>=3.0.11, <=3.0.19) +6 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.3.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - cn.cenxt:cenxt-task-scheduler-core =0.0.1, =3.0.11,...

ai.ylyue:yue-library-data-es (>=j8.2.3.0, <=j11.2.6.1), ai.ylyue:yue-library-data-jdbc (>=j8.2.3.0, <=j11.2.6.1) +531 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=2.0.0.release, <=2.4.18)

org.springframework.data:spring-data-relational MAVEN version =2.0.0.release, =j8.2.3.0, =j8.2.3.0, =0.0.1-alpha, =0.0.2-alpha, =2.5.0, =1.0.1, =2.4.5, =1.0.9, =0.0.1, =1.0.0.release, =0.1.8.jre11, =1.0.0, =1.0.0, =4.0.462, =4.0.551 and more Source cves: CVE-2026-41697 Source advisory:...

cn.guomw.cloud:framework-cloud-starter-web (>=1.0.0.release, <=1.1.0.1.btxc.release), org.nhind:config-service-jar (7.0.2) +3 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.9.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - cn.guomw.cloud:framework-cloud-starter-web =1.0.0.release...

be.appify.prefab:prefab-annotation-processor (>=0.1.0, <=0.1.1), be.appify.prefab:prefab-core (>=0.1.0, <=0.1.1) +669 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-relational MAVEN version =3.5.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.1.21 and more Source cves: CVE-2026-41697 Source advisory: GHSA-8R2H-XH92-GQ57...

ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.2.0), ai.ylyue:yue-library-data-jdbc (>=j8.2.2.0, <=j11.2.2.0) +11 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.5.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - ai.ylyue:yue-library-data-es =j8.2.2.0, =j8.2.2.0,...

ch.nexsol-tech.gateway:sample-gateway (>=0.0.1, <=1.1.0), ch.nexsol-tech.gateway:spring-cloud-gateway-database (>=0.0.1, <=1.1.0) +610 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-relational MAVEN version =3.4.0, =0.0.1, =0.0.1, =2.0.0-release, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =2.51.0 and more Source cves: CVE-2026-41697 Source advisory: GHSA-8R2H-XH92-GQ57https://vulners.com/github/GHSA-8R...

be.appify.prefab:prefab-annotation-processor (>=0.1.0, <=0.1.1), be.appify.prefab:prefab-core (>=0.1.0, <=0.1.1) +669 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (>=3.5.0, <=3.5.11)

org.springframework.data:spring-data-relational MAVEN version =3.5.0, =0.1.0, =0.1.0, =0.1.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.0, =2.1.21 and more Source cves: CVE-2026-41697 Source advisory: OSV:GHSA-8R2H-XH92-GQ57...

com.infobip:infobip-spring-data-jdbc-querydsl (3.0.0), org.springframework.boot:spring-boot-starter-data-jdbc (2.2.1.release) +1 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.1.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.infobip:infobip-spring-data-jdbc-querydsl 3.0.0 -...

cn.fxbin.bubble:bubble-fireworks-data-mybatis (0.0.3-release), cn.fxbin.bubble:bubble-fireworks-starter-mybatis (0.0.3-release) +2 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.8.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - cn.fxbin.bubble:bubble-fireworks-data-mybatis 0.0.3-relea...

com.ethlo.keyvalue:keyvalue-mysql (>=1.0.0, <=1.1.2), org.springframework.boot:spring-boot-starter-data-jdbc (2.2.0.release) +1 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.0.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.ethlo.keyvalue:keyvalue-mysql =1.0.0, =1.1.2 -...

com.github.jchanghong:test (2.2.6), com.github.jchanghong:utils (2.2.6) +2 more potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.6.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - com.github.jchanghong:test 2.2.6 -...

org.springframework.data:spring-data-jdbc (1.1.13.release) potentially affected by CVE-2026-41697 via org.springframework.data:spring-data-relational (1.1.13.release)

org.springframework.data:spring-data-relational MAVEN version 1.1.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-relational and may be impacted: - org.springframework.data:spring-data-jdbc 1.1.13.release...

be.appify.prefab:prefab-annotation-processor (>=0.7.0, <=0.10.9), be.appify.prefab:prefab-mongodb (>=0.5.0, <=0.10.9) +123 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (>=5.0.0, <=5.0.5)

org.springframework.data:spring-data-mongodb MAVEN version =5.0.0, =0.7.0, =0.5.0, =0.5.0, =4.0.0.0-m2, =4.0.0.0-m2, =1.0.1, =1.0.1, =3.0.0, =4.0.0, =4.3.1, =0.0.1, =0.0.2, =0.0.2, =1.0.4 - com.mzinx:mongodb-spring-materialized-view 1.0.0 and more Source cves: CVE-2026-41717 Source advisory:...

net.dreamlu:mica-plus-mongo (1.2.2), org.springframework.boot:spring-boot-starter-data-mongodb (2.1.13.release) +13 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.16.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - net.dreamlu:mica-plus-mongo 1.2.2 -...

ch.sahits.game:openpatriciantest (>=1.0.0, <=1.0.1), com.alipay.sofa:sofa-tracer-mongodb-plugin (>=3.1.0, <=3.1.2) +22 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - ch.sahits.game:openpatriciantest =1.0.0, =3.1.0, =2.1.0.release...

com.ahome-it:ahome-tooling-server-core (>=1.1.19-release, <=1.1.27-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.23-release, <=1.1.27-release) +57 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.0.release)

org.springframework.security:spring-security-web MAVEN version 4.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.19-release,...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.6.1, <=5.6.3), org.springframework.amqp:spring-rabbit (1.7.12.release) +2 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.12.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.6.1, =5.6.3 -...

org.springframework.amqp:spring-rabbit (1.3.4.release), org.springframework.boot:spring-boot-starter-amqp (>=1.1.0.release, <=1.1.3.release) +1 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.3.4.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.3.4.release -...

com.github.aidensuen:mongodao-core (>=1.0.1, <=1.1.2), com.github.aidensuen:mongodao-pagehelper (>=1.0.3, <=1.1.2) +30 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.aidensuen:mongodao-core =1.0.1, =1.0.3, =1.0.3,...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.1.4, <=5.4.2), org.springframework.amqp:spring-rabbit (1.7.9.release) +2 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.9.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.1.4, =5.4.2 -...