CVE-2026-47834
Spring Data JPA Sort expression validation bypass
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Spring Data JPA Sort expression validation bypass
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15
- Record
CVE-2026-47834- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
EUVDEUVD-2026-66676
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15
- Record
EUVD-2026-66676- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-77gf-pv2q-2p9p
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are...
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15
- Record
GHSA-77gf-pv2q-2p9p- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
NVD
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15
- Record
CVE-2026-47834- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSV
Spring Data JPA Sort expression validation bypass
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15
- Record
CVE-2026-47834- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVCLSA-2026-1791470326 No score
TuxCare security update for org.springframework.data:spring-data-jpa (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-jpa to address 1 CVE. Fixed in 3.3.13-tuxcare.7.
- Record
CLSA-2026-1791470326- Updated
- 2026-11-02
Show 6 moreShow less
OSVCLSA-2026-1791984118 No score
TuxCare security update for org.springframework.data:spring-data-jpa (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-jpa to address 1 CVE. Fixed in 3.5.13-tuxcare.3.
- Record
CLSA-2026-1791984118- Updated
- 2026-11-02
OSVCLSA-2026-1791984420 No score
TuxCare security update for org.springframework.data:spring-data-jpa (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-jpa to address 1 CVE. Fixed in 3.4.13-tuxcare.4.
- Record
CLSA-2026-1791984420- Updated
- 2026-11-02
OSVCLSA-2026-1792429273 No score
TuxCare security update for org.springframework.data:spring-data-jpa (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-jpa to address 1 CVE. Fixed in 3.3.12-tuxcare.3.
- Record
CLSA-2026-1792429273- Updated
- 2026-11-02
OSVCLSA-2026-1792662923 No score
TuxCare security update for org.springframework.data:spring-data-jpa (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-jpa to address 1 CVE. Fixed in 3.1.8-tuxcare.3.
- Record
CLSA-2026-1792662923- Updated
- 2026-11-02
OSVCLSA-2026-1792668848 No score
TuxCare security update for org.springframework.data:spring-data-jpa (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-jpa to address 1 CVE. Fixed in 3.0.12-tuxcare.2.
- Record
CLSA-2026-1792668848- Updated
- 2026-11-02
OSVCLSA-2026-1793187929 No score
TuxCare security update for org.springframework.data:spring-data-jpa (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-jpa to address 1 CVE. Fixed in 3.2.12-tuxcare.5.
- Record
CLSA-2026-1793187929- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework.data:spring-data-jpaTuxCare:Maven |
3.3.13 up to 3.3.13-tuxcare.7, plus listed versions 3.3.13-tuxcare.13.3.13-tuxcare.23.3.13-tuxcare.33.3.13-tuxcare.43.3.13-tuxcare.53.3.13-tuxcare.6 |
3.3.13-tuxcare.7 |
org.springframework.data:spring-data-jpaTuxCare:Maven |
3.5.13 up to 3.5.13-tuxcare.3, plus listed versions 3.5.13-tuxcare.13.5.13-tuxcare.2 |
3.5.13-tuxcare.3 |
org.springframework.data:spring-data-jpaTuxCare:Maven |
3.4.13 up to 3.4.13-tuxcare.4, plus listed versions 3.4.13-tuxcare.13.4.13-tuxcare.23.4.13-tuxcare.3 |
3.4.13-tuxcare.4 |
org.springframework.data:spring-data-jpaTuxCare:Maven |
3.3.12 up to 3.3.12-tuxcare.3, plus listed versions 3.3.12-tuxcare.13.3.12-tuxcare.2 |
3.3.12-tuxcare.3 |
org.springframework.data:spring-data-jpaTuxCare:Maven |
3.1.8 up to 3.1.8-tuxcare.3, plus listed versions 3.1.8-tuxcare.13.1.8-tuxcare.2 |
3.1.8-tuxcare.3 |
org.springframework.data:spring-data-jpaTuxCare:Maven |
3.0.12 up to 3.0.12-tuxcare.2, plus listed versions 3.0.12-tuxcare.1 |
3.0.12-tuxcare.2 |
org.springframework.data:spring-data-jpaTuxCare:Maven |
3.2.12 up to 3.2.12-tuxcare.5, plus listed versions 3.2.12-tuxcare.13.2.12-tuxcare.23.2.12-tuxcare.33.2.12-tuxcare.4 |
3.2.12-tuxcare.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, published | EUVD, OSV | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-47834 is a medium vulnerability (CVSS 4.8) in Spring Data Jpa, published August 26, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in org.springframework.data:spring-data-jpa 3.3.13-tuxcare.7.