← CVE Intelligence

CVE-2026-47834

Spring Data JPA Sort expression validation bypass PUBLISHED

Description (CNA)

Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15

Affected (CNA)

Vendor / productVersions
Spring / Spring Data JPAaffected 4.1.0; affected 4.0.0 through 4.0.6; affected 3.5.0 through 3.5.13; affected 3.0.0 through 3.4.15

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.