ai.ancf.lmos:arc-memory-mongo-spring-boot-starter (>=0.114.0, <=0.120.0), ai.intelliswarm:swarmai-core (>=1.0.0, <=1.0.29) +3360 more potentially affected by CVE-2026-41695 via org.springframework.data:spring-data-commons (>=3.4.0, <=3.4.13)

🗓️ 31 Jul 2026 16:44:15Reported by Vulners OSVType

vulnersosv🔗 github.com

Vulnerability in spring-data-commons affects multiple libraries via transitive dependency.

Reporter	Title	Published	Views	Family All 72
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-data-commons jar	27 Jul 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	18 Aug 202604:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Data Commons [CVE-2026-41695, CVE-2026-41711, CVE-2026-41716, CVE-2026-41721 ]	27 Jul 202620:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	10 Jul 202603:58	–	ibm
Chainguard	CVE-2026-41695 vulnerabilities	2 Aug 202602:16	–	cgr
Circl	CVE-2026-41695	10 Jun 202605:00	–	circl
CNNVD	VMware Spring Data Commons 资源管理错误漏洞	10 Jun 202600:00	–	cnnvd
CVE	CVE-2026-41695	9 Jun 202623:47	–	cve

31 Jul 2026 16:44Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

EPSS0.0046

SSVC

spring-data-commons org.springframework.data transitive dependency