Skip to content
OpenAdvisories

Package · Maven

org.springframework.data:spring-data-jpa

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2019-3802

    Additional information exposure with Spring Data JPA example matcher

    This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than a…

    Spring Spring Data JPA org.springframework.data:spring-data-jpa Maven
  • Low 3.5
    CVE-2019-3797

    Additional information exposure with Spring Data JPA derived queries

    This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parame…

    Spring Spring Boot org.springframework.data:spring-data-jpa Maven