Spring Spring Data REST

• CVE-2026-47849 High 7.1 Spring Data REST allows mutation of identifier and version properties via JSON Patch 0.4%
• CVE-2026-47850 Medium 4.3 Spring Data REST allows mutation of the version property of immutable aggregates via PUT 0.3%
• CVE-2026-41837 Medium 5.3 Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys 0.2%
• CVE-2026-41730 Medium 5.3 Spring Data REST exposes persistence-layer internals in error responses 0.2%
• CVE-2026-41729 High 8.1 Spring Data REST SpEL Injection via Map Key in JSON Patch 0.4%
• CVE-2026-41728 High 7.5 Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections 0.3%