{
  "@id": "urn:uuid:2be09c86-2477-4bb4-8339-8bf0a7f6445e",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-09T10:30:24.804848+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.data/spring-data-jdbc@1.0.21.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.data/spring-data-jdbc@1.0.21.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-09T10:30:24.804848+00:00",
      "status_notes": "Vulnerability CVE-2026-41697 does not affect version 1.0.21.RELEASE-tuxcare.1 of org.springframework.data:spring-data-jdbc. not_affected \u2014 Version 1.0.21.RELEASE does not contain the vulnerable Query By Example (QBE) feature with StringMatcher support. The vulnerable component RelationalExampleMapper and the entire org.springframework.data.relational.core.query package were introduced in version 2.2, well after this release. The Input (QBE probe with StringMatcher) cannot be received because the feature does not exist in this vers...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-41697"
      },
      "impact_statement": "not_affected \u2014 Version 1.0.21.RELEASE does not contain the vulnerable Query By Example (QBE) feature with StringMatcher support. The vulnerable component RelationalExampleMapper and the entire org.springframework.data.relational.core.query package were introduced in version 2.2, well after this release. The Input (QBE probe with StringMatcher) cannot be received because the feature does not exist in this vers..."
    }
  ]
}