Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Spring Data Commons 2.7.20, 3.0.16 and 6 more versions Clear all filters
TI-2026-30236 CVE-2026-41721 · GHSA-5m4m-73w9-8433

Spring Data Commons Denial of Service via Data Binding

Priority LOW 26

Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPayload, when an attacker se…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00331 Published 2026-06-09 Partial fix · 4.0.5.1, 3.5.11.1 +8 CWE-400
TI-2026-30227 CVE-2026-41711 · GHSA-5vpf-xvv7-c8vh

Potential Denial of Service through crafted Sort Parameters

Priority LOW 26

Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00303 Published 2026-06-09 Partial fix · 4.0.5.1, 3.5.11.1 +8 CWE-400