Skip to content
OpenAdvisories

Product · Spring

Spring Data MongoDB

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-41696

    Spring Data MongoDB Bind Parameter Literal Quoting Breakout

    Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affect…

    Spring Spring Data MongoDB org.springframework.data:spring-data-mongodb Maven