{
  "@id": "urn:uuid:9cb95555-9fd1-4b10-b5c6-bcb47bc4272b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-28T15:42:45.068420+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.data/spring-data-relational-parent@2.0.5.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.data/spring-data-relational-parent@2.0.5.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T15:42:45.068420+00:00",
      "status_notes": "Vulnerability CVE-2026-41697 does not affect version 2.0.5.RELEASE-tuxcare.1 of org.springframework.data:spring-data-relational-parent. not_affected \u2014 Version 2.0.5.RELEASE is not affected by CVE-2026-41697. The vulnerable component (Query By Example with RelationalExampleMapper) does not exist in this version. QBE support was introduced in version 2.2 (March 2021), several months after version 2.0.5.RELEASE was released (October 2020). The RelationalExampleMapper class, which is the entry point for QBE probes using StringMatcher (STARTING, E...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-41697"
      },
      "impact_statement": "not_affected \u2014 Version 2.0.5.RELEASE is not affected by CVE-2026-41697. The vulnerable component (Query By Example with RelationalExampleMapper) does not exist in this version. QBE support was introduced in version 2.2 (March 2021), several months after version 2.0.5.RELEASE was released (October 2020). The RelationalExampleMapper class, which is the entry point for QBE probes using StringMatcher (STARTING, E..."
    }
  ]
}