PatchTheCVEspring data commons vulnerabilities and fixes
Recent CVEs affecting spring data commons, with upgrade or downgrade steps. 4 tracked.
Also searched as: springdatacommons.
spring data commons has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-06-10. Highest priority: CVE-2026-41695 (score 39/100).
- CVE-2026-41695 HIGH 7.5 UPGRADE Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attac
- CVE-2026-41716 HIGH 7.5 UPGRADE Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cach
- CVE-2026-41721 MEDIUM 5.9 UPGRADE Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Da
- CVE-2026-41711 MEDIUM 5.9 UPGRADE Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a Stac
FAQ
How do I fix spring data commons vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is spring data commons being exploited right now?
None of the tracked spring data commons CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which spring data commons CVE should I patch first?
CVE-2026-41695 currently ranks highest (39/100): Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attac.