{
  "@id": "urn:uuid:adeee744-5173-48d9-b896-02abeb6b035e",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-20T13:56:00.078920+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.data/spring-data-r2dbc@1.2.9-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.data/spring-data-r2dbc@1.2.9-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-20T13:56:00.078920+00:00",
      "status_notes": "Vulnerability CVE-2026-41697 does not affect version 1.2.9-tuxcare.1 of org.springframework.data:spring-data-r2dbc. not_affected \u2014 CVE-2026-41697 affects RelationalExampleMapper in spring-data-relational, which improperly escapes user input in Query By Example (QBE) with StringMatcher. The target repository is spring-data-r2dbc v1.2.9, which declares spring-data-relational v2.1.9 as a dependency but does NOT use QBE functionality. R2dbcRepository does not extend QueryByExampleExecutor, and exhaustive searches found zero us...",
      "vulnerability": {
        "name": "CVE-2026-41697"
      },
      "impact_statement": "not_affected \u2014 CVE-2026-41697 affects RelationalExampleMapper in spring-data-relational, which improperly escapes user input in Query By Example (QBE) with StringMatcher. The target repository is spring-data-r2dbc v1.2.9, which declares spring-data-relational v2.1.9 as a dependency but does NOT use QBE functionality. R2dbcRepository does not extend QueryByExampleExecutor, and exhaustive searches found zero us..."
    }
  ]
}