{
  "@id": "urn:uuid:cc699065-83ab-4185-98b9-2d48478e7786",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-03T18:52:13.787067+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.data/spring-data-jdbc@1.0.3.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.data/spring-data-jdbc@1.0.3.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-03T18:52:13.787067+00:00",
      "status_notes": "Vulnerability CVE-2026-41697 does not affect version 1.0.3.RELEASE-tuxcare.1 of org.springframework.data:spring-data-jdbc. not_affected \u2014 Version 1.0.3.RELEASE does not contain the Query By Example (QBE) feature introduced in later versions. CVE-2026-41697 affects the RelationalExampleMapper class when using StringMatcher (STARTING, ENDING, CONTAINING) modes, which fail to escape SQL wildcard characters in user input. This entire feature \u2014 including RelationalExampleMapper, the Criteria.like method, the Escaper class, and all QBE...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-41697"
      },
      "impact_statement": "not_affected \u2014 Version 1.0.3.RELEASE does not contain the Query By Example (QBE) feature introduced in later versions. CVE-2026-41697 affects the RelationalExampleMapper class when using StringMatcher (STARTING, ENDING, CONTAINING) modes, which fail to escape SQL wildcard characters in user input. This entire feature \u2014 including RelationalExampleMapper, the Criteria.like method, the Escaper class, and all QBE..."
    }
  ]
}