Container image	Digest	Package	Fixed in
graviteeio/apim-gateway :4.12.19-debian	05fd67a93056	spring-data-commons@3.4.4	no fix listed
graviteeio/apim-management-api :4.12.19-debian	27374522cd04	spring-data-commons@3.4.4	no fix listed

Open the chart page →

4,806

hertzbeathertzbeat

1.8.1

2 of 4 See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
apache/hertzbeat :1.8.0	75d48a62748f	spring-data-commons@3.4.2	no fix listed
apache/hertzbeat-collector :1.8.0	a2bab1be574c	spring-data-commons@3.4.2	no fix listed

Open the chart page →

14,000

thingsboardcetic

0.1.2

1 of 2 See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
thingsboard/tb-postgres :latest	2d17e4e36edc	spring-data-commons@3.4.10	no fix listed

Open the chart page →

5,235

apimgraviteeio

4.12.19

2 of 4 See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
graviteeio/apim-gateway :4.12.19-debian	05fd67a93056	spring-data-commons@3.4.4	no fix listed
graviteeio/apim-management-api :4.12.19-debian	27374522cd04	spring-data-commons@3.4.4	no fix listed

Open the chart page →

4,806

rocketmq-clusterrocketmq

12.6.0

1 of 2 See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	spring-data-commons@3.4.5	no fix listed

Open the chart page →

6,328

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	spring-data-commons@3.5.4	3.5.12

Open the chart page →

3,674

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	spring-data-commons@3.5.6	3.5.12

Open the chart page →

15,863

enavenav-service-architecture

0.0.7

5 of 10 See more

enav enav-service-architecture 0.0.7

5 of the 10 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/enav-aton-admin-service :latest	cf85570b1324	spring-data-commons@4.0.5	4.0.6
ghcr.io/gla-rad/enav-aton-service :latest	3be878690629	spring-data-commons@4.0.5	4.0.6
ghcr.io/gla-rad/enav-aton-service-client :latest	f1629ac5f9ec	spring-data-commons@4.0.5	4.0.6
ghcr.io/gla-rad/enav-ckeeper :latest	415323ef112b	spring-data-commons@4.0.4	4.0.6
ghcr.io/gla-rad/enav-vdes-controller :latest	c4c52955814f	spring-data-commons@4.0.4	4.0.6

Open the chart page →

15,860

amgraviteeio

4.12.6

2 of 3 See more

am graviteeio 4.12.6

2 of the 3 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
graviteeio/am-gateway :4.12.6	07b7f6dc267a	spring-data-commons@3.4.5	no fix listed
graviteeio/am-management-api :4.12.6	a8eb04ee0c70	spring-data-commons@3.4.5	no fix listed

Open the chart page →

2,088

querysiakhooi

1.0.0

1 of 1 See more

query siakhooi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
siakhooi/query :1.0.0	f1f4b5b1b870	spring-data-commons@4.0.4	4.0.6

Open the chart page →

1,792

bluerange-serverbluerange

1.3.1

1 of 1 See more

bluerange-server bluerange 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
bluerange/bluerange :26.1.3	07c8f73b55df	spring-data-commons@3.4.5	no fix listed

Open the chart page →

1,816

colosseumbook-k8sinfra-v2

1.0.18

1 of 5 See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
sysnet4admin/colosseum-agg :log	bc25b152d88e	spring-data-commons@3.4.1	no fix listed

Open the chart page →

26,996

dara-chartsdara-charts

0.1.0

1 of 2 See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
razzy10/product-service :latest	702e411956db	spring-data-commons@3.5.3	3.5.12

Open the chart page →

3,547

eximeebpmseximeebpms-k8s

0.3.0

1 of 1 See more

eximeebpms eximeebpms-k8s 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
ghcr.io/eximeebpms/eximeebpms-bpm-platform :run-1.3.0	acb8dbce38fd	spring-data-commons@4.0.3	4.0.6

Open the chart page →

727

fineractfineract-openshift

0.1.1

1 of 4 See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
apache/fineract :1.12.1	a83cf1980609	spring-data-commons@3.4.4	no fix listed

Open the chart page →

7,792

mod-data-exportfolio-org

0.1.40

1 of 1 See more

mod-data-export folio-org 0.1.40

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
folioci/mod-data-export :latest	0cc86bf09755	spring-data-commons@4.0.2	4.0.6

Open the chart page →

1,393

mod-data-export-springfolio-org

0.1.4

1 of 1 See more

mod-data-export-spring folio-org 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
folioci/mod-data-export-spring :latest	f1d7caf4544b	spring-data-commons@4.0.2	4.0.6

Open the chart page →

1,253

mod-data-export-workerfolio-org

0.1.15

1 of 1 See more

mod-data-export-worker folio-org 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
folioci/mod-data-export-worker :latest	1ad1811c9b37	spring-data-commons@4.0.2	4.0.6

Open the chart page →

1,214

cc-spring-appgridgain

1.0.6

1 of 1 See more

cc-spring-app gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
gridgain/cloud-connector :2025.5.1	5ab838d7d3cb	spring-data-commons@3.5.8	3.5.12

Open the chart page →

1,691

kf-app-eaiit-at-m

0.1.7

1 of 1 See more

kf-app-eai it-at-m 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
ghcr.io/it-at-m/kf-app-eai :1.0.6	5de339b3d537	spring-data-commons@3.5.3	3.5.12

Open the chart page →

1,947

komgalinkding

0.2.3

1 of 1 See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
gotson/komga :1.22.0	ba892ab3e082	spring-data-commons@3.4.0	no fix listed

Open the chart page →

3,131

fineractopenshift

0.1.1

1 of 4 See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
apache/fineract :1.12.1	a83cf1980609	spring-data-commons@3.4.4	no fix listed

Open the chart page →

7,792

operatonoperaton

1.0.5

1 of 1 See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
operaton/operaton :1.0.0-beta-4	b35867ffe4d8	spring-data-commons@3.4.4	no fix listed

Open the chart page →

2,003

unifiqaoru

1.1.2

1 of 2 See more

unifi qaoru 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
linuxserver/unifi-network-application :10.6.101-ls144	b6ce6968ee45	spring-data-commons@3.5.11	3.5.12

Open the chart page →

3,642

stirling-pdfrubxkube

0.1.2

1 of 1 See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	spring-data-commons@4.0.5	4.0.6

Open the chart page →

6,207

retail-store-sample-orders-chartstacksimplify

2.0.0

1 of 1 See more

retail-store-sample-orders-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-containers/retail-store-sample-orders :1.3.0	e85f034bcf48	spring-data-commons@3.5.3	3.5.12

Open the chart page →

1,223

timetabletwomartens

0.2.0

1 of 1 See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
2martens/timetable :latest	bd1ba6ab84c9	spring-data-commons@3.5.4	3.5.12

Open the chart page →

1,527

wahlrechttwomartens

0.3.0

1 of 1 See more

wahlrecht twomartens 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-41695.

Container image	Digest	Package	Fixed in
2martens/wahlrecht :latest	ba2c3040dab0	spring-data-commons@3.5.2	3.5.12

Open the chart page →

1,689

Container images carrying it

34 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/fineract :1.12.1	a83cf1980609	spring-data-commons@3.4.4	no fix listed	2
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	spring-data-commons@3.4.5	no fix listed	2
graviteeio/apim-gateway :4.12.19-debian	05fd67a93056	spring-data-commons@3.4.4	no fix listed	2
graviteeio/apim-management-api :4.12.19-debian	27374522cd04	spring-data-commons@3.4.4	no fix listed	2
2martens/timetable :latest	bd1ba6ab84c9	spring-data-commons@3.5.4	3.5.12	1
2martens/wahlrecht :latest	ba2c3040dab0	spring-data-commons@3.5.2	3.5.12	1
apache/hertzbeat :1.8.0	75d48a62748f	spring-data-commons@3.4.2	no fix listed	1
apache/hertzbeat-collector :1.8.0	a2bab1be574c	spring-data-commons@3.4.2	no fix listed	1
atlassian/jira-software :11.3.11	e5548cd4eea8	spring-data-commons@3.4.3	no fix listed	1
bluerange/bluerange :26.1.3	07c8f73b55df	spring-data-commons@3.4.5	no fix listed	1
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	spring-data-commons@3.5.4	3.5.12	1
folioci/mod-data-export :latest	0cc86bf09755	spring-data-commons@4.0.2	4.0.6	1
folioci/mod-data-export-spring :latest	f1d7caf4544b	spring-data-commons@4.0.2	4.0.6	1
folioci/mod-data-export-worker :latest	1ad1811c9b37	spring-data-commons@4.0.2	4.0.6	1
gotson/komga :1.22.0	ba892ab3e082	spring-data-commons@3.4.0	no fix listed	1
graviteeio/am-gateway :4.12.6	07b7f6dc267a	spring-data-commons@3.4.5	no fix listed	1
graviteeio/am-management-api :4.12.6	a8eb04ee0c70	spring-data-commons@3.4.5	no fix listed	1
gridgain/cloud-connector :2025.5.1	5ab838d7d3cb	spring-data-commons@3.5.8	3.5.12	1
linuxserver/unifi-network-application :10.6.101-ls144	b6ce6968ee45	spring-data-commons@3.5.11	3.5.12	1
operaton/operaton :1.0.0-beta-4	b35867ffe4d8	spring-data-commons@3.4.4	no fix listed	1
razzy10/product-service :latest	702e411956db	spring-data-commons@3.5.3	3.5.12	1
siakhooi/query :1.0.0	f1f4b5b1b870	spring-data-commons@4.0.4	4.0.6	1
sysnet4admin/colosseum-agg :log	bc25b152d88e	spring-data-commons@3.4.1	no fix listed	1
thingsboard/tb-postgres :latest	2d17e4e36edc	spring-data-commons@3.4.10	no fix listed	1
ghcr.io/eximeebpms/eximeebpms-bpm-platform :run-1.3.0	acb8dbce38fd	spring-data-commons@4.0.3	4.0.6	1
ghcr.io/gla-rad/enav-aton-admin-service :latest	cf85570b1324	spring-data-commons@4.0.5	4.0.6	1
ghcr.io/gla-rad/enav-aton-service :latest	3be878690629	spring-data-commons@4.0.5	4.0.6	1
ghcr.io/gla-rad/enav-aton-service-client :latest	f1629ac5f9ec	spring-data-commons@4.0.5	4.0.6	1
ghcr.io/gla-rad/enav-ckeeper :latest	415323ef112b	spring-data-commons@4.0.4	4.0.6	1
ghcr.io/gla-rad/enav-vdes-controller :latest	c4c52955814f	spring-data-commons@4.0.4	4.0.6	1
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	spring-data-commons@3.5.6	3.5.12	1
ghcr.io/it-at-m/kf-app-eai :1.0.6	5de339b3d537	spring-data-commons@3.5.3	3.5.12	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	spring-data-commons@4.0.5	4.0.6	1
public.ecr.aws/aws-containers/retail-store-sample-orders :1.3.0	e85f034bcf48	spring-data-commons@3.5.3	3.5.12	1