What’s Vulnerable › Products

Spring Data Commons vulnerabilities

7 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Spring Data Commons version is affected

Exploited Spring Data Commons vulnerabilities

• CVE-2018-1273 — VMware Tanzu Spring Data Commons Property Binder Vulnerability

Latest Spring Data Commons vulnerabilities

• CVE-2026-41721 — Spring Data Commons Denial of Service via Data Binding (CVSS 5.9)
• CVE-2026-41716 — Spring Data web support unbounded negative-result cache keyed on attacker-supplied property names (CVSS 7.5)
• CVE-2026-41711 — Potential Denial of Service through crafted Sort Parameters (CVSS 5.9)
• CVE-2026-41695 — Denial of Service in Spring Data Commons Property Path Resolution (CVSS 7.5)
• CVE-2018-1259 — (CVSS 7.5)
• CVE-2018-1274 — (CVSS 7.5)
• CVE-2018-1273 — VMware Tanzu Spring Data Commons Property Binder Vulnerability (CVSS 9.8) — exploited