Skip to content
OpenAdvisories

Package · Maven

org.springframework.data:spring-data-relational

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-41697

    Spring Data Relational Parameter not Escaped for Query By Example LIKE Pattern

    Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). An attacker can supply wildcard characters to perform boolean-based blind data …

    Spring Spring Data JDBC Spring Data Relational Spring Data R2DBC Maven