Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.springframework.data:spring-data-jpa

3 known vulnerabilities (2 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 low
Registry
Maven Central

Advisories 3

  • Additional information exposure with Spring Data JPA example matcher

    Affected: from 2.1.0, fixed in 2.1.8; from 2.0.0, fixed in 2.1.8; fixed in 1.11.22.

  • Additional information exposure with Spring Data JPA derived queries

    Affected: fixed in 1.11.20; from 2.0.0, fixed in 2.0.14; from 2.1.0, fixed in 2.1.6.

  • SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a…

    Affected: fixed in 1.9.6; from 1.10.0, fixed in 1.10.4.