{
  "@id": "urn:uuid:2215353b-07bb-4509-b88e-65ca79610143",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-22T10:05:17.306784+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.data/spring-data-r2dbc@1.2.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.data/spring-data-r2dbc@1.2.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:05:17.306784+00:00",
      "status_notes": "Vulnerability CVE-2026-41697 does not affect version 1.2.8-tuxcare.1 of org.springframework.data:spring-data-r2dbc. not_affected \u2014 Spring Data R2DBC version 1.2.8 is NOT affected by CVE-2026-41697. The vulnerability concerns Query By Example (QBE) with StringMatcher in Spring Data Relational's RelationalExampleMapper class. However, Spring Data R2DBC 1.2.8 does not implement Query By Example at all\u2014QBE was only introduced in version 1.3.0-M5 (released March 2021), after the 1.2.8 release. While spring-data-relational is a ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-41697"
      },
      "impact_statement": "not_affected \u2014 Spring Data R2DBC version 1.2.8 is NOT affected by CVE-2026-41697. The vulnerability concerns Query By Example (QBE) with StringMatcher in Spring Data Relational's RelationalExampleMapper class. However, Spring Data R2DBC 1.2.8 does not implement Query By Example at all\u2014QBE was only introduced in version 1.3.0-M5 (released March 2021), after the 1.2.8 release. While spring-data-relational is a ..."
    }
  ]
}