Security Advisory
CVE-2026-47834
4.8
MEDIUM
Vulnerability Description
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources.
Spring Data JPA 4.1.0
Spring Data JPA 4.0.0 - 4.0.6
Spring Data JPA 3.5.0 - 3.5.13
Spring Data JPA 3.0.0 - 3.4.15
Published Date
August 26, 2026
Official Source
NIST NVD Advisory