Spring Spring Data JPA vulnerabilities (CVE)

CVE records published for Spring Spring Data JPA, newest first. Follow to get an email when a new one appears.

1 results

4.8Medium

CVE-2026-47834 2 months ago

Spring Data JPA Sort expression validation bypass

Spring Spring Data JPA

Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15