Spring Spring Data REST vulnerabilities
6 published CVEs name Spring Spring Data REST among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-47849
Spring Data REST allows mutation of identifier and version properties via JSON Patch
Spring · Spring Data REST
High7.1 - CVE-2026-47850
Spring Data REST allows mutation of the version property of immutable aggregates via PUT
Spring · Spring Data REST
Medium4.3 - CVE-2026-41837
Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys
Spring · Spring Data REST
Medium5.3 - CVE-2026-41730
Spring Data REST exposes persistence-layer internals in error responses
Spring · Spring Data REST
Medium5.3 - CVE-2026-41729
Spring Data REST SpEL Injection via Map Key in JSON Patch
Spring · Spring Data REST
High8.1 - CVE-2026-41728
Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections
Spring · Spring Data REST
High7.5