Vmware Spring_data_mongodb
3 CVEs affecting Vmware Spring_data_mongodb. Latest disclosed: 2026-06-10. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22980 | Critical | 9.8 | 2022-06-23 | A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain… |
CVE-2026-41717 | High | 8.1 | 2026-06-10 | Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a user-defi… |
CVE-2026-41696 | Medium | 5.9 | 2026-06-10 | Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An… |