Skip to content
OpenAdvisories

Product · Spring

Spring Data MongoDB

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-41717

    Spring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding

    Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affecte…

    Spring Spring Data MongoDB org.springframework.data:spring-data-mongodb Maven