org.springframework.data:spring-data-rest-core vulnerabilities (Root)

2 vulnerabilities.

• org.springframework.data:spring-data-rest-core Root Spring Data REST SpEL Injection via Map Key in JSON Patch CVE-2026-41729 Public exploitFix available 8.1 HighJune 9, 2026
• org.springframework.data:spring-data-rest-core Root Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections CVE-2026-41728 Fix available 7.5 HighJune 9, 2026