Skip to content
OpenAdvisories

Product · Spring

Spring Data REST

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-41729 Public exploit

    Spring Data REST SpEL Injection via Map Key in JSON Patch

    Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch (application/json-patch+json) requests. When a persistent entity exposes a Map-typed property, the JSON Pointer path segment used as the map ke…

    Spring Spring Data REST org.springframework.data:spring-data-rest-core Maven