Known vulnerabilities in VMware Spring Data Geode
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-2818 | A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write… | 8.2 High | Feb 20, 2026 |
| CVE-2026-2817 | Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive… | 4.4 Medium | Feb 19, 2026 |