Spring Data Mongodb
VMware · 3 CVEs
CVE-2026-41717
HIGH
Spring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding
Jun 9, 2026
CVE-2026-41696
MEDIUM
Spring Data MongoDB Bind Parameter Literal Quoting Breakout
Jun 9, 2026
CVE-2022-22980
CRITICAL
MongoDB: SpEL in query methods allow code injection
Jun 22, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-41717 | Spring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding | HIGH | 0.42% | Jun 9, 2026 |
| CVE-2026-41696 | Spring Data MongoDB Bind Parameter Literal Quoting Breakout | MEDIUM | 0.33% | Jun 9, 2026 |
| CVE-2022-22980 | MongoDB: SpEL in query methods allow code injection | CRITICAL | 17.84% | Jun 22, 2022 |
Showing 1 to 3 of 3 CVEs