CVE Intelligence

Spring Spring Data JPA vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Spring Spring Data JPA: 1 record(s), with affected versions and fixes.

CVE-2026-47834 Medium · 6.5 Aug 26, 2026
Spring Data JPA Sort expression validation bypass
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15