Spring Data Gemfire (Vmware) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-02-20. Vendor: Vmware.

CVEs of Spring Data Gemfire

• CVE-2026-2818 - CVSS 8.2 (high), 2026-02-20: A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write files outside the intended extraction…
• CVE-2026-2817 - CVSS 4.8 (medium), 2026-02-19: Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On…