org.springframework.data:spring-data-commons

Maven · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Spring Data: Unbounded property-path cache keyed by externally-supplied path stringCVE-2026-41695 · GHSA-88FW-V6X4-3F58	org.springframework.data:spring-data-commons Red Hat Fuse 7/spring-data-commons	MavenRed Hat	High	Fix reported	2026-09-10
Spring Data Commons: Denial of Service via excessive memory allocation in projection bindingCVE-2026-41721 · GHSA-5M4M-73W9-8433	org.springframework.data:spring-data-commons Red Hat Data Grid 8/spring-data-commons	MavenRed Hat	Medium	Fix reported	2026-09-10
Spring Data Commons: StackOverflowException when parsing Sort parameters (DoS)CVE-2026-41711 · GHSA-5VPF-XVV7-C8VH	org.springframework.data:spring-data-commons Red Hat Data Grid 8/spring-data-commons	MavenRed Hat	Medium	Fix reported	2026-09-10
Spring Data Commons: Heap exhaustion from unbounded property-lookup cache retaining crafted string keysCVE-2026-41716 · GHSA-9FW2-H3HF-293R	org.springframework.data:spring-data-commons Red Hat Fuse 7/spring-data-commons	MavenRed Hat	High	Fix reported	2026-09-10
Spring Data Commons remote code injection vulnerabilityCVE-2018-1273 · GHSA-4FQ3-MR56-CG6R	org.springframework.data:spring-data-commons Red Hat Fuse 7/spring-data-commons	MavenRed Hat	Critical	Fix reported	2024-03-20
Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocationCVE-2018-1274 · GHSA-5Q8M-MQMX-PXP9	org.springframework.data:spring-data-commons Red Hat Fuse 7/spring-data-commons	MavenRed Hat	High	Fix reported	2024-03-04
Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity referencesCVE-2018-1259 · GHSA-M929-7FR6-CVJG	org.springframework.data:spring-data-commons	Maven	High	Fix reported	2023-11-08