Spring Data Mongodb (Spring) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-10. Vendor: Spring.

CVEs of Spring Data Mongodb

• CVE-2026-41717 - CVSS 8.1 (high), 2026-06-10: Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a…
• CVE-2026-41696 - CVSS 5.9 (medium), 2026-06-10: Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An…