Skip to content
OpenAdvisories

Product · Spring

Spring Data JDBC

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-41697

    Spring Data Relational Parameter not Escaped for Query By Example LIKE Pattern

    Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). An attacker can supply wildcard characters to perform boolean-based blind data …

    Spring Spring Data JDBC Spring Data Relational Spring Data R2DBC Maven