Spring Data Commons

2 results · Clear filters · Feed

• Medium 5.9
  CVE-2026-41721

  Spring Data Commons Denial of Service via Data Binding

  Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPayload, when an attacker sends a specially crafted HTTP request th…

  Spring Spring Data Commons org.springframework.data:spring-data-commons Maven
  Jun 9, 2026
• Medium 5.9
  CVE-2026-41711

  Potential Denial of Service through crafted Sort Parameters

  Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.…

  Spring Spring Data Commons org.springframework.data:spring-data-commons Maven
  Jun 9, 2026