CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41695

Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 24.0%

CVSS Severity

CVSS v3 Score 7.5

References

https://spring.io/security/cve-2026-41695

Products affected by CVE-2026-41695

Broadcom » Spring Data Commons » Version: 3.4.0

cpe:2.3:a:broadcom:spring_data_commons:3.4.0
Broadcom » Spring Data Commons » Version: 3.4.1

cpe:2.3:a:broadcom:spring_data_commons:3.4.1
Broadcom » Spring Data Commons » Version: 3.4.10

cpe:2.3:a:broadcom:spring_data_commons:3.4.10
Broadcom » Spring Data Commons » Version: 3.4.11

cpe:2.3:a:broadcom:spring_data_commons:3.4.11
Broadcom » Spring Data Commons » Version: 3.4.12

cpe:2.3:a:broadcom:spring_data_commons:3.4.12
Broadcom » Spring Data Commons » Version: 3.4.13

cpe:2.3:a:broadcom:spring_data_commons:3.4.13
Broadcom » Spring Data Commons » Version: 3.4.2

cpe:2.3:a:broadcom:spring_data_commons:3.4.2
Broadcom » Spring Data Commons » Version: 3.4.3

cpe:2.3:a:broadcom:spring_data_commons:3.4.3
Broadcom » Spring Data Commons » Version: 3.4.4

cpe:2.3:a:broadcom:spring_data_commons:3.4.4
Broadcom » Spring Data Commons » Version: 3.4.5

cpe:2.3:a:broadcom:spring_data_commons:3.4.5
Broadcom » Spring Data Commons » Version: 3.4.6

cpe:2.3:a:broadcom:spring_data_commons:3.4.6
Broadcom » Spring Data Commons » Version: 3.4.7

cpe:2.3:a:broadcom:spring_data_commons:3.4.7
Broadcom » Spring Data Commons » Version: 3.4.8

cpe:2.3:a:broadcom:spring_data_commons:3.4.8
Broadcom » Spring Data Commons » Version: 3.4.9

cpe:2.3:a:broadcom:spring_data_commons:3.4.9
Broadcom » Spring Data Commons » Version: 3.5.0

cpe:2.3:a:broadcom:spring_data_commons:3.5.0
Broadcom » Spring Data Commons » Version: 3.5.1

cpe:2.3:a:broadcom:spring_data_commons:3.5.1
Broadcom » Spring Data Commons » Version: 3.5.10

cpe:2.3:a:broadcom:spring_data_commons:3.5.10
Broadcom » Spring Data Commons » Version: 3.5.11

cpe:2.3:a:broadcom:spring_data_commons:3.5.11
Broadcom » Spring Data Commons » Version: 3.5.2

cpe:2.3:a:broadcom:spring_data_commons:3.5.2
Broadcom » Spring Data Commons » Version: 3.5.3

cpe:2.3:a:broadcom:spring_data_commons:3.5.3
Broadcom » Spring Data Commons » Version: 3.5.4

cpe:2.3:a:broadcom:spring_data_commons:3.5.4
Broadcom » Spring Data Commons » Version: 3.5.5

cpe:2.3:a:broadcom:spring_data_commons:3.5.5
Broadcom » Spring Data Commons » Version: 3.5.6

cpe:2.3:a:broadcom:spring_data_commons:3.5.6
Broadcom » Spring Data Commons » Version: 3.5.7

cpe:2.3:a:broadcom:spring_data_commons:3.5.7
Broadcom » Spring Data Commons » Version: 3.5.8

cpe:2.3:a:broadcom:spring_data_commons:3.5.8
Broadcom » Spring Data Commons » Version: 3.5.9

cpe:2.3:a:broadcom:spring_data_commons:3.5.9
Broadcom » Spring Data Commons » Version: 4.0.0

cpe:2.3:a:broadcom:spring_data_commons:4.0.0
Broadcom » Spring Data Commons » Version: 4.0.1

cpe:2.3:a:broadcom:spring_data_commons:4.0.1
Broadcom » Spring Data Commons » Version: 4.0.2

cpe:2.3:a:broadcom:spring_data_commons:4.0.2
Broadcom » Spring Data Commons » Version: 4.0.3

cpe:2.3:a:broadcom:spring_data_commons:4.0.3
Broadcom » Spring Data Commons » Version: 4.0.4

cpe:2.3:a:broadcom:spring_data_commons:4.0.4
Broadcom » Spring Data Commons » Version: 4.0.5

cpe:2.3:a:broadcom:spring_data_commons:4.0.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-41695

Products

Pricing

Contact Us