Spring Data Rest vulnerabilities

• spring data rest, vmware spring data rest +1 more Spring Data REST allows mutation of identifier and version properties via JSON Patch CVE-2026-47849 Fix available 7.1 HighAugust 27, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST allows mutation of the version property of immutable aggregates via PUT CVE-2026-47850 Fix available 4.3 MediumAugust 26, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys CVE-2026-41837 Fix available 5.3 MediumJune 9, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST exposes persistence-layer internals in error responses CVE-2026-41730 Fix available 5.3 MediumJune 9, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST SpEL Injection via Map Key in JSON Patch CVE-2026-41729 Public exploitFix available 8.1 HighJune 9, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections CVE-2026-41728 Fix available 7.5 HighJune 9, 2026