| CVE-2026-47849 |
Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON…
|
7.1
Élevée
|
27 août 2026 |
| CVE-2026-47850 |
Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an…
|
4.3
Moyenne
|
26 août 2026 |
| CVE-2026-41837 |
Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and…
|
5.3
Moyenne
|
9 juin 2026 |
| CVE-2026-41730 |
Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing…
|
5.3
Moyenne
|
9 juin 2026 |
| CVE-2026-41729 |
Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch…
|
8.1
Élevée
|
9 juin 2026 |
| CVE-2026-41728 |
Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter to…
|
7.5
Élevée
|
9 juin 2026 |