Search for packages
Package details: pkg:maven/org.springframework.data/spring-data-commons@1.12.4.RELEASE
purl pkg:maven/org.springframework.data/spring-data-commons@1.12.4.RELEASE
Next non-vulnerable version 1.13.12.RELEASE
Latest non-vulnerable version 2.0.7.RELEASE
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-dam4-ygz5-aaaj
Aliases:
CVE-2018-1273
GHSA-4fq3-mr56-cg6r
Remote code injection vulnerability in org.springframework.data:spring-data-commons
1.12.11.RELEASE
Affected by 1 other vulnerability.
1.13.11
Affected by 0 other vulnerabilities.
1.13.11.RELEASE
Affected by 1 other vulnerability.
2.0.6
Affected by 0 other vulnerabilities.
2.0.6.RELEASE
Affected by 1 other vulnerability.
VCID-wt73-58ea-aaac
Aliases:
CVE-2018-1274
GHSA-5q8m-mqmx-pxp9
Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation
1.13.11
Affected by 0 other vulnerabilities.
1.13.11.RELEASE
Affected by 1 other vulnerability.
2.0.6
Affected by 0 other vulnerabilities.
2.0.6.RELEASE
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T14:01:56.569840+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 36.1.3
2025-06-20T14:01:55.783153+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 36.1.3
2025-06-03T20:53:57.296654+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 36.1.0
2025-06-03T20:53:56.330019+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 36.1.0
2025-06-02T20:33:43.024634+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 36.1.2
2025-06-02T20:33:42.082771+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 36.1.2
2025-04-03T16:50:45.458218+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 36.0.0
2025-04-03T16:50:43.695944+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 36.0.0
2025-02-17T22:54:47.531029+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 35.1.0
2025-02-17T22:54:47.126211+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 35.1.0
2024-11-20T22:14:18.139994+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 35.0.0
2024-11-18T22:10:10.116798+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.3.2
2024-10-07T23:10:29.797565+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.2
2024-10-07T17:40:05.831463+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac https://github.com/advisories/GHSA-5q8m-mqmx-pxp9 34.0.2
2024-09-22T23:25:14.543404+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.1
2024-09-22T18:11:51.953866+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac https://github.com/advisories/GHSA-5q8m-mqmx-pxp9 34.0.1
2024-04-24T01:21:09.632533+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.0rc4
2024-04-24T01:21:09.203064+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc4
2024-04-23T19:01:14.665969+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc4
2024-04-23T19:01:14.152546+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac https://github.com/advisories/GHSA-5q8m-mqmx-pxp9 34.0.0rc4
2024-01-10T03:49:59.401263+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.0rc2
2024-01-10T03:49:58.980472+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc2
2024-01-09T20:53:19.538760+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac https://github.com/advisories/GHSA-5q8m-mqmx-pxp9 34.0.0rc2
2024-01-09T20:53:18.967878+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc2
2024-01-03T20:27:13.690925+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.0rc1
2024-01-03T20:27:13.257687+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc1
2024-01-03T16:03:34.990667+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc1