NetSight
IP …
medium6.4

CVE-2026-41719

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates eva…

Impact

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through 3.2.15; 3.1.0 through 3.1.14; 3.0.0 through 3.0.15; 2.7.0 through 2.7.19.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.springframework.data:spring-data-keyvalue>= 4.0.0, <= 4.0.54.0.6

Affected products

VendorProductAffected versions
BroadcomSpring Data Keyvalue
from 2.7.0 before 2.7.20
from 3.0.0 before 3.0.16
from 3.1.0 before 3.1.15
from 3.2.0 before 3.2.16
from 3.3.0 before 3.3.17
from 3.4.0 before 3.4.15
BroadcomSpring Data Redis
from 2.7.0 before 2.7.20
from 3.0.0 before 3.0.16
from 3.1.0 before 3.1.15
from 3.2.0 before 3.2.16
from 3.3.0 before 3.3.17
from 3.4.0 before 3.4.15

Weakness classification

CWE-917

References