Spring Data Commons (Spring) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-10. Vendor: Spring.

CVEs of Spring Data Commons

• CVE-2026-41711 - CVSS 5.9 (medium), 2026-06-10: Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters.…
• CVE-2026-41721 - CVSS 5.9 (medium), 2026-06-10: Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a…
• CVE-2026-41716 - CVSS 7.5 (high), 2026-06-10: Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through…
• CVE-2026-41695 - CVSS 7.5 (high), 2026-06-10: Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed…