| CVE-2026-47849 |
Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON…
|
7.1
High
|
Aug 27, 2026 |
| CVE-2026-47850 |
Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an…
|
4.3
Medium
|
Aug 26, 2026 |
| CVE-2026-41837 |
Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and…
|
5.3
Medium
|
Jun 9, 2026 |
| CVE-2026-41730 |
Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing…
|
5.3
Medium
|
Jun 9, 2026 |
| CVE-2026-41729 |
Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch…
|
8.1
High
|
Jun 9, 2026 |
| CVE-2026-41728 |
Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter to…
|
7.5
High
|
Jun 9, 2026 |