← CVE Intelligence

CVE-2026-41695

Denial of Service in Spring Data Commons Property Path Resolution PUBLISHED

Description (CNA)

Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14.

Affected (CNA)

Vendor / productVersions
Spring / Spring Data Commonsaffected 4.0.0 before 4.0.5.1; affected 3.5.0 before 3.5.11.1; affected 3.4.0 before 3.4.15

CWE

CWE-400

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.