Skip to content
OpenAdvisories

Package · Maven

org.springframework.data:spring-data-mongodb

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2022-22980 Public exploit EPSS 18%

    SpEL Injection in Spring Data MongoDB

    A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

    org.springframework.data:spring-data-mongodb Maven