SD
Product
Spring Data Commons
On CISA KEVExploited in the wildRansomware-linked
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch
Add Spring Data Commons to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41721 | 5.9 | Jun 9 | Spring Data Commons Denial of Service via Data Binding Affected: 2.7.0 before 2.7.20; 3.0.0 through 3.0.15; 3.1.0 through 3.1.14; 3.2.0 through 3.2.15; 3.3.0 before 3.3.17; 3.4.0 before 3.4.15; +2 more |
| CVE-2026-41711 | 5.9 | Jun 9 | Potential Denial of Service through crafted Sort Parameters Affected: 2.7.0 before 2.7.20; 3.0.0 through 3.0.15; 3.1.0 through 3.1.14; 3.2.0 through 3.2.15; 3.3.0 before 3.3.17; 3.4.0 before 3.4.15; +2 more |
Showing 2