broadcom spring data keyvalue vulnerabilities (CVE)

CVE records published for broadcom spring data keyvalue, newest first. Follow to get an email when a new one appears.

1 results

6.4Medium

CVE-2026-41719 5 months ago

Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator

Spring Spring Data KeyValue; Spring Spring Data Redis

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis …