Skip to content
OpenAdvisories

Product · Spring

Spring Data REST

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-47850

    Spring Data REST allows mutation of the version property of immutable aggregates via PUT

    Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data RES…

    Spring Spring Data REST
  • Medium 5.3
    CVE-2026-41837

    Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys

    Spring Data REST's Querydsl integration accepts arbitrary persistent property paths as request-parameter filter keys and does not consider Jackson customizations before handing them to Querydsl. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 …

    Spring Spring Data REST org.springframework.data:spring-data-rest-core Maven
  • Medium 5.3
    CVE-2026-41730

    Spring Data REST exposes persistence-layer internals in error responses

    Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals to HTTP clients. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14;…

    Spring Spring Data REST org.springframework.data:spring-data-rest-core Maven