Security Advisory

CVE-2026-41695

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-09 23:47:33
Last updated 2026-06-27 21:31:50
Assigner vmware
CVSS score 7.5
State PUBLISHED

Description

Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14.