spring_data_mongodb vulnerabilities
CVEs whose affected-version data names the spring_data_mongodb package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-41717High· 8.1Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability
Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-al…
▾ Twilightvmware · spring_data_mongodbEPSS 0.33%via NVD
CVE-2026-41696Medium· 5.9Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter
Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expr…
▾ Sunlitvmware · spring_data_mongodbEPSS 0.26%via NVD