spring-projects/spring-data-rest Security Advisories | GitStock

medium2026-06-10

Spring Data REST potentially exposes persistence-layer internals to HTTP clients

GHSA-p5mm-xwgq-whfr · CVE-2026-41730

medium2026-06-10

Spring Data REST Querydsl Integration Exposes Persistent Property Paths, Bypassing Jackson Customizations

GHSA-mwpv-rg79-863c · CVE-2026-41837

high2026-06-10

Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch requests

GHSA-j388-8rm5-p97f · CVE-2026-41729

high2026-06-10

Spring Data REST has Improper Access Control in its JSON Patch Implementation

GHSA-cv39-x4c6-hhp2 · CVE-2026-41728

low2022-09-22

Spring Data REST can expose hidden entity attributes

GHSA-fv7x-v67w-cvqv · CVE-2022-31679

critical2022-05-13

Remote code execution in PATCH requests in Spring Data REST

GHSA-9qf9-28h9-hqcj · CVE-2017-8046