PatchTheCVE: codermyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-40542: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the datahttps://patchthecve.com/cve/CVE-2024-40542.htmlhttps://patchthecve.com/cve/CVE-2024-40542.htmlWed, 17 Jun 2026 07:46:03 +0000CRITICAL 9.8: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset.CVE-2024-40541: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the datahttps://patchthecve.com/cve/CVE-2024-40541.htmlhttps://patchthecve.com/cve/CVE-2024-40541.htmlWed, 17 Jun 2026 07:46:03 +0000CRITICAL 9.8: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build.CVE-2024-40540: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the datahttps://patchthecve.com/cve/CVE-2024-40540.htmlhttps://patchthecve.com/cve/CVE-2024-40540.htmlWed, 17 Jun 2026 07:46:03 +0000CRITICAL 9.8: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept.CVE-2024-40539: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the datahttps://patchthecve.com/cve/CVE-2024-40539.htmlhttps://patchthecve.com/cve/CVE-2024-40539.htmlWed, 17 Jun 2026 07:46:03 +0000CRITICAL 9.8: my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user.