com.breuninger.boot:example-app (>=3.1.1.release, <=3.2.1.release), com.codingapi:codingapi-test (0.0.2) +34 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.breuninger.boot:example-app =3.1.1.release, =1.0.3, =1.0.20...

de.bwaldvogel:mongo-java-server-test-common (1.34.0), io.holunda.taskpool:camunda-bpm-taskpool-view-mongo (>=2.0.7, <=2.1.2) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.2.9.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.bwaldvogel:mongo-java-server-test-common 1.34.0 -...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), com.tairanchina.csp.dew:cluster-spi-rabbit (>=1.5.0-beta, <=1.5.1-rc) +53 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.7.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1, =1.5.0-beta, =1.3.0-rc.15-release,...

app.tozzi:jpa-search-helper (>=3.6.0, <=4.0.0), be.appify.prefab:prefab-annotation-processor (>=0.2.0, <=0.10.9) +2326 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (>=4.0.0, <=4.0.5)

org.springframework.data:spring-data-commons MAVEN version =4.0.0, =3.6.0, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.2.0, =0.4.0, =0.5.0, =0.2.0, =1.0.0, =1.0.0, =1.1.0 and more Source cves: CVE-2026-41711 Source advisory: OSV:GHSA-5VPF-XVV7-C8VH...

org.springframework.data:spring-data-mongodb-cross-store (1.3.1.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.3.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

cn.hdfk7.boot:hdfk7-boot-starter-common (>=1.0.0, <=3.0.3), cn.herodotus.engine:message-rabbitmq-spring-boot-starter (>=3.2.0.0, <=3.3.0.6) +279 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (>=3.1.0, <=3.1.12)

org.springframework.amqp:spring-amqp MAVEN version =3.1.0, =1.0.0, =3.2.0.0, =3.3.0.0, =5.0.7, =0.1.0, =0.1.0, =2.1.21, =0.12.2, =0.10.0, =5.13.0, =5.13.2 and more Source cves: CVE-2026-41701 Source advisory: GHSA-P5F7-RJHP-PXVC...

com.github.eagle6688:devutility.external.mongo (>=2.0.6.1, <=2.0.6.4), com.github.krraghavan:mongodb-aggregate-query-support-reactive (>=0.8.0, <=0.8.4) +15 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.0.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.eagle6688:devutility.external.mongo =2.0.6.1, =0.8.0...

com.github.double-bin:commons-spring-boot-starter (1.0.1), com.netshoes:spring-cloud-sleuth-amqp (>=0.8, <=0.9) +18 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.double-bin:commons-spring-boot-starter 1.0.1 -...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), br.com.itsme:commons (>=0.0.4-alpha, <=0.0.5-alpha) +944 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (>=2.0.0.release, <=2.4.17)

org.springframework.amqp:spring-amqp MAVEN version =2.0.0.release, =0.5.0, =0.0.4-alpha, =0.1.0.beta, =3.0.0.release, =3.0.0.release, =1.0.0, =1.0.0, =1.2.0-release, =1.0.1, =1.0.0, =2.1.0 and more Source cves: CVE-2026-41701 Source advisory: GHSA-P5F7-RJHP-PXVC...

org.springframework.amqp:spring-rabbit (1.1.0.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.1.0.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.1.0.release Source cves: CVE-2026-4170...

com.github.cwilper.fcrepo-cloudsync:fcrepo-cloudsync-service (>=1.0.0-beta-1, <=1.0.0), com.github.lltyk:tapestry-spring-security (>=3.0.2, <=3.0.3) +128 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (3.0.5.release)

org.springframework.security:spring-security-web MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

org.springframework.boot:spring-boot-starter-data-mongodb (2.1.15.release), org.springframework.boot:spring-boot-starter-data-mongodb-reactive (2.1.15.release) +2 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.1.18.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.boot:spring-boot-starter-data-mongodb...

ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), cn.craccd:mongohelper (1.0.0) +272 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (>=4.4.0, <=4.4.13)

org.springframework.data:spring-data-mongodb MAVEN version =4.4.0, =0.114.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.0.0, =3.4.6.0 and more Source cves: CVE-2026-41696 Source advisory: GHSA-HC43-M36C-8V33...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), com.eurodyn.qlack.fuse:qlack-fuse-aaa (3.9.9) +89 more potentially affected by CVE-2026-41003 via org.springframework.security:spring-security-saml2-service-provider (>=6.5.0, <=6.5.10)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.5.0, =1.0.0.ee-20260424025040, =11.14.0, =v6.3.3, =1.0.6, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.0, =15.1.3 and more Source cves: CVE-2026-41003https://vulners.com/cve/CVE-2026-4...

com.sangupta:jerry-services (1.0.0), in.clouthink.daas:daas-bm-mongodb (>=1.0.0, <=1.0.3) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.7.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.sangupta:jerry-services 1.0.0 -...

com.epages:restdocs-api-spec-restassured (>=0.17.1, <=0.19.4), io.github.bgmsound:documentify-core (>=0.0.1, <=0.0.2) +2 more potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-restassured (>=3.0.0, <=3.0.3)

org.springframework.restdocs:spring-restdocs-restassured MAVEN version =3.0.0, =0.17.1, =0.0.1, =1.0.0, =1.2.4, =1.3.9 Source cves: CVE-2026-40991 Source advisory: OSV:GHSA-6RPQ-6VV2-5222...

org.springframework.data:spring-data-mongodb-cross-store (1.8.6.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.8.6.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.8.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.aol.microservices:micro-dbcp (>=0.79, <=0.84), com.aol.microservices:micro-hibernate (>=0.73, <=0.84) +54 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.11.1.release)

org.springframework.data:spring-data-commons MAVEN version 1.11.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.aol.microservices:micro-dbcp =0.79, =0.73, =0.78, =0.73,...

org.springframework.amqp:spring-rabbit (1.1.2.release) potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.1.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.1.2.release Source cves: CVE-2026-4171...

am.ik.home:uaa-client (1.9.0), am.ik.home:uaa-integration-test (1.9.0) +410 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (4.2.2.release)

org.springframework.security:spring-security-web MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client 1.9.0 -...