CVE Intelligence

Vmware Spring Data Jpa vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Vmware Spring Data Jpa: 1 record(s), with affected versions and fixes.
cpe:2.3:a:vmware:spring_data_jpa

CVE-2026-47834 Medium · 6.5 Aug 26, 2026
Spring Data JPA Sort expression validation bypass
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15