Filtered by vendor Spring Subscriptions
Filtered by product Spring Data Jpa Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-47834 1 Spring 1 Spring Data Jpa 2026-09-01 4.8 Medium
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15