Spring Data Mongodb (Vmware) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 406 known versions, newest CVE from 2026-06-10. Vendor: Vmware.

CVEs of Spring Data Mongodb

• CVE-2026-41717 - CVSS 8.1 (high), 2026-06-10: Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a…
• CVE-2026-41696 - CVSS 5.9 (medium), 2026-06-10: Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An…
• CVE-2022-22980 - CVSS 9.8 (critical), 2022-06-23: A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain…