Spring Spring Data Redis

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-417194.0.0 – < 4.0.5.1 ; 3.5.0 – < 3.5.11.1 ; 3.4.0 – < 3.4.15 ; …Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparatorMEDIUM 6.40.2 %