spring_data_relational vulnerabilities

CVEs whose affected-version data names the spring_data_relational package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-41697Medium· 4.8

3mo ago

Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE)

Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (STARTING, ENDING, or CONTAINING) in Query By Example (QBE). An attacker can supply wildcard characters to perform boo…

▾ Sunlitbroadcom · spring_data_relationalEPSS 0.23%via NVD