spring-projects/spring-data-jpa
GitHub
Releases392
Frequency2 weeks 8 hours
Last Release
Stars3.27K
Simplifies the development of creating a JPA-based data access layer.
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| — | — | — | ||
Querydsl 5.1.0 and OpenFeign Querydsl 6.8 allows SQL/HQL injection in orderBy in JPAQuery. NOTE: this is disputed by a Querydsl community member because the product is not intended to defend against a developer who uses untrusted input directly in query construction. | ||||
| = 1.10.2, <= 1.9.4 | — | 6.8 MEDIUM | ||
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call. | ||||