Spring Data MongoDB vulnerabilities

1 known vulnerability in Spring Data MongoDB from Spring. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Spring Data MongoDB: Improper Neutralization of Special Elements used in an Expression Language Statement

  CVE-2026-41717Jun 10, 2026Spring

  Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected