All 6 CVE vulnerabilities found in Spring Data REST, with AI-generated Chinese analysis, references, and POCs.
Vendor: n/a
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-41837 | Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys CWE-284 | 5.3 | Medium | 2026-06-09 |
| CVE-2026-41730 | Spring Data REST exposes persistence-layer internals in error responses CWE-209 | 5.3 | Medium | 2026-06-09 |
| CVE-2026-41729 | Spring Data REST SpEL Injection via Map Key in JSON Patch CWE-917 | 8.1 | High | 2026-06-09 |
| CVE-2026-41728 | Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections CWE-284 | 7.5 | High | 2026-06-09 |
| CVE-2022-31679 | VMware Spring Data REST 安全漏洞 | 3.7 | - | 2022-09-21 |
| CVE-2021-22047 | VMware Spring Security 安全漏洞 CWE-200 | 5.3 | - | 2021-10-28 |
All 6 known CVE vulnerabilities affecting Spring Data REST with full Chinese analysis, references, and POCs where available.