Spring Data Commons (Broadcom) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 379 known versions, newest CVE from 2026-06-10. Vendor: Broadcom.

CVEs of Spring Data Commons

• CVE-2026-41721 - CVSS 5.9 (medium), 2026-06-10: Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a…
• CVE-2026-41716 - CVSS 7.5 (high), 2026-06-10: Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through…
• CVE-2026-41711 - CVSS 5.9 (medium), 2026-06-10: Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters.…
• CVE-2026-41695 - CVSS 7.5 (high), 2026-06-10: Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed…
• CVE-2018-1259 - CVSS 7.5 (high), 2018-05-11: Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property…
• CVE-2018-1274 - CVSS 7.5 (high), 2018-04-18: Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited…
• CVE-2018-1273 - CVSS 9.8 (critical), 2018-04-11: Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by…