Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
SQL InjectionCVE-2016-6652
Affects org.springframework.data:spring-data-jpa | Versions [,1.9.6.RELEASE)[1.10.0.RELEASE,1.10.4.RELEASE)
Has fix
MavenPublished 3 Oct 2016
  • M
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')CVE-2026-41719
Affects org.springframework.data:spring-data-keyvalue | Versions [,3.5.12)[4.0.0-M1,4.0.6)
Has fix
MavenPublished 11 Jun 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-41696
Affects org.springframework.data:spring-data-mongodb | Versions [,4.5.12)[5.0.0-M1,5.0.6)
Has fix
MavenPublished 12 Jun 2026
  • C
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')CVE-2026-41717
Affects org.springframework.data:spring-data-mongodb | Versions [,4.5.12)[5.0.0-M1,5.0.6)
Has fix
MavenPublished 11 Jun 2026
  • C
SpEL Expression injectionCVE-2022-22980
Affects org.springframework.data:spring-data-mongodb | Versions [,3.3.5)[3.4.0,3.4.1)
Has fix
MavenPublished 21 Jun 2022
  • M
SQL InjectionCVE-2026-41697
Affects org.springframework.data:spring-data-relational | Versions [, 3.5.12)[4.0.0-M1, 4.0.6)
Has fix
MavenPublished 11 Jun 2026
  • M
Improper Enforcement of Behavioral WorkflowCVE-2026-47850
Affects org.springframework.data:spring-data-rest-core | Versions [,5.0.7)[5.1.0, 5.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-47849
Affects org.springframework.data:spring-data-rest-core | Versions [,5.0.7)[5.1.0,5.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Access Control BypassCVE-2026-41837
Affects org.springframework.data:spring-data-rest-core | Versions [,4.5.12)[5.0.0-M1,5.0.6)
Has fix
MavenPublished 27 Jul 2026
  • M
Information ExposureCVE-2026-41730
Affects org.springframework.data:spring-data-rest-core | Versions [,4.5.12)[5.0.0-M1,5.0.6)
Has fix
MavenPublished 27 Jul 2026
  • H
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')CVE-2026-41729
Affects org.springframework.data:spring-data-rest-core | Versions [,4.5.12)[5.0.0-M1,5.0.6)
Has fix
MavenPublished 27 Jul 2026
  • H
Improperly Controlled Modification of Dynamically-Determined Object AttributesCVE-2026-41728
Affects org.springframework.data:spring-data-rest-core | Versions [,4.5.12)[5.0.0-M1,5.0.6)
Has fix
MavenPublished 27 Jul 2026
  • M
Information ExposureCVE-2022-31679
Affects org.springframework.data:spring-data-rest-webmvc | Versions [0,3.6.7)[3.7.0,3.7.3)
Has fix
MavenPublished 20 Sept 2022
  • M
Information ExposureCVE-2021-22047
Affects org.springframework.data:spring-data-rest-webmvc | Versions [3.5.0,3.5.6)[,3.4.14)
Has fix
MavenPublished 27 Oct 2021
  • C
Arbitrary Code ExecutionCVE-2017-8046
Affects org.springframework.data:spring-data-rest-webmvc | Versions [,2.6.7.RELEASE)
Has fix
MavenPublished 16 Apr 2018
  • H
Arbitrary Code ExecutionCVE-2017-3203
Affects org.springframework.flex:spring-flex-core | Versions [0,]
Has fix
MavenPublished 21 May 2017
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59287
Affects org.springframework.graphql:spring-graphql | Versions [1.3.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59289
Affects org.springframework.graphql:spring-graphql | Versions [1.2.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • C
Deserialization of Untrusted DataCVE-2026-59285
Affects org.springframework.graphql:spring-graphql | Versions [2.0.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-59288
Affects org.springframework.graphql:spring-graphql | Versions [1.0.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • C
Unsafe Dependency ResolutionCVE-2026-59286
Affects org.springframework.graphql:spring-graphql | Versions [1.0.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • C
Deserialization of Untrusted DataCVE-2026-41699
Affects org.springframework.graphql:spring-graphql | Versions [,1.4.6)[2.0.0-M1, 2.0.4)
Has fix
MavenPublished 11 Jun 2026
  • H
Origin Validation ErrorCVE-2026-41700
Affects org.springframework.graphql:spring-graphql | Versions [,1.4.6)[2.0.0-M1, 2.0.4)
Has fix
MavenPublished 11 Jun 2026
  • H
Incorrect AuthorizationCVE-2026-41856
Affects org.springframework.graphql:spring-graphql | Versions [,1.4.6)[2.0.0-M1, 2.0.4)
Has fix
MavenPublished 11 Jun 2026
  • L
Information ExposureCVE-2023-34047
Affects org.springframework.graphql:spring-graphql | Versions [1.1.0,1.1.6)[1.2.0,1.2.3)
Has fix
MavenPublished 20 Sept 2023
  • L
Improper Isolation or CompartmentalizationCVE-2026-40968
Affects org.springframework.grpc:spring-grpc-core | Versions [,1.0.3)
Has fix
MavenPublished 29 Apr 2026
  • M
Generation of Error Message Containing Sensitive InformationCVE-2026-40969
Affects org.springframework.grpc:spring-grpc-core | Versions [,1.0.3)
Has fix
MavenPublished 29 Apr 2026
  • H
Improperly Controlled Modification of Dynamically-Determined Object AttributesCVE-2026-41006
Affects org.springframework.hateoas:spring-hateoas | Versions [1.5.0 , 2.5.3)[3.0.0-M1, 3.0.4)
Has fix
MavenPublished 9 Jun 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41007
Affects org.springframework.hateoas:spring-hateoas | Versions [1.5.0 , 2.5.3)[3.0.0-M1, 3.0.4)
Has fix
MavenPublished 9 Jun 2026
  • H
HTTP Header InjectionCVE-2023-34036
Affects org.springframework.hateoas:spring-hateoas | Versions [,1.5.5)[2.0.0,2.0.5)[2.1.0,2.1.1)
Has fix
MavenPublished 16 Jul 2023