Known vulnerabilities in Spring Data MongoDB
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-41717 | Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability | 8.1 High | Jun 9, 2026 |
| CVE-2026-41696 | Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient… | 5.9 Medium | Jun 9, 2026 |