Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.springframework.data:spring-data-rest-core
Maven
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Spring Data REST potentially exposes persistence-layer internals to HTTP clients
CVE-2026-41730 · GHSA-P5MM-XWGQ-WHFR
org.springframework.data:spring-data-rest-core
Maven
Medium
Fix reported
2026-08-12
Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch requests
CVE-2026-41729 · GHSA-J388-8RM5-P97F
org.springframework.data:spring-data-rest-core
Maven
High
Fix reported
2026-08-12
Spring Data REST has Improper Access Control in its JSON Patch Implementation
CVE-2026-41728 · GHSA-CV39-X4C6-HHP2
org.springframework.data:spring-data-rest-core
Maven
High
Fix reported
2026-08-12
Spring Data REST Querydsl Integration Exposes Persistent Property Paths, Bypassing Jackson Customizations
CVE-2026-41837 · GHSA-MWPV-RG79-863C
org.springframework.data:spring-data-rest-core
Maven
Medium
Fix reported
2026-08-12
Spring Data REST can expose hidden entity attributes
CVE-2022-31679 · GHSA-FV7X-V67W-CVQV
org.springframework.data:spring-data-rest-core
Maven
Low
Fix reported
2024-12-03
Exposure of Resource to Wrong Sphere in Spring Data REST
CVE-2021-22047 · GHSA-4926-QPXG-6R3W
org.springframework.data:spring-data-rest-core
Maven
Medium
Fix reported
2023-11-08
Remote code execution in PATCH requests in Spring Data REST
CVE-2017-8046 · GHSA-9QF9-28H9-HQCJ
org.springframework.data:spring-data-rest-core
Maven
Critical
Fix reported
2023-11-08
