Vmware Spring Data Rest vulnerabilities

• spring data rest, vmware spring data rest +1 more Spring Data REST allows mutation of identifier and version properties via JSON Patch CVE-2026-47849 Fix available 7.1 HighAugust 27, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST allows mutation of the version property of immutable aggregates via PUT CVE-2026-47850 Fix available 4.3 MediumAugust 26, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys CVE-2026-41837 Fix available 5.3 MediumJune 9, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST exposes persistence-layer internals in error responses CVE-2026-41730 Fix available 5.3 MediumJune 9, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST SpEL Injection via Map Key in JSON Patch CVE-2026-41729 Public exploitFix available 8.1 HighJune 9, 2026
• spring data rest, vmware spring data rest +1 more Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections CVE-2026-41728 Fix available 7.5 HighJune 9, 2026
• vmware spring data rest Spring Data REST can expose hidden entity attributes CVE-2022-31679 Fix available 3.7 LowSeptember 21, 2022
• vmware spring data rest Exposure of Resource to Wrong Sphere in Spring Data REST CVE-2021-22047 Fix available 5.3 MediumOctober 28, 2021
• broadcom spring data commons, xmlbeam, pivotal software spring data rest +2 more Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references CVE-2018-1259 Public exploitFix available 7.5 HighMay 11, 2018
• broadcom spring data commons, pivotal software spring data rest, spring by pivotal framework +1 more +3 more Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation CVE-2018-1274 Fix available 7.5 HighApril 18, 2018
• broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 more Spring Data Commons remote code injection vulnerability CVE-2018-1273 In KEVPublic exploitFix available EPSS 97.0% 9.8 CriticalApril 11, 2018
• pivotal software spring data rest, vmware spring boot, pivotal spring data rest and spring boot +2 more Remote code execution in PATCH requests in Spring Data REST CVE-2017-8046 Public exploitFix available EPSS 74.5% 9.8 CriticalJanuary 4, 2018