Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 21:51:36 +0000 CVE-2026-41716 — Spring Data web support unbounded negative-result cache keyed on attacker-supplied property names https://vulnerability.circl.lu/vuln/cve-2026-41716 <p><strong>Affected:</strong> Spring Data Commons</p> <p>Spring Data&#39;s internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests.</p> <p>Affected versions: Spring Data Commons 2.7.0 through 2.7.19; 3.3.0 through 3.3.16; 3.4.0 through 3.4.14; 3.5.0 through 3.5.11; 4.0.0 through 4.0.5.</p> <p><strong>Affected:</strong> Spring Data Commons</p> <p>Spring Data&#39;s internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests.</p> <p>Affected versions: Spring Data Commons 2.7.0 through 2.7.19; 3.3.0 through 3.3.16; 3.4.0 through 3.4.14; 3.5.0 through 3.5.11; 4.0.0 through 4.0.5.</p> https://vulnerability.circl.lu/vuln/cve-2026-41716