Search for packages
Package details: pkg:maven/org.springframework.data/spring-data-commons@1.13.0
purl pkg:maven/org.springframework.data/spring-data-commons@1.13.0
Tags Ghost
Next non-vulnerable version 1.13.12.RELEASE
Latest non-vulnerable version 2.0.7.RELEASE
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-dam4-ygz5-aaaj
Aliases:
CVE-2018-1273
GHSA-4fq3-mr56-cg6r
Remote code injection vulnerability in org.springframework.data:spring-data-commons
1.13.11
Affected by 0 other vulnerabilities.
1.13.11.RELEASE
Affected by 1 other vulnerability.
2.0.6
Affected by 0 other vulnerabilities.
2.0.6.RELEASE
Affected by 1 other vulnerability.
VCID-t5ah-yp4n-aaag
Aliases:
CVE-2018-1259
GHSA-m929-7fr6-cvjg
Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references
1.13.12
Affected by 0 other vulnerabilities.
1.13.12.RELEASE
Affected by 0 other vulnerabilities.
2.0.7
Affected by 0 other vulnerabilities.
2.0.7.RELEASE
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T20:02:38.286929+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj None 36.0.0
2025-03-28T20:02:37.191484+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag None 36.0.0
2024-09-17T22:42:13.853732+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 34.0.1
2024-09-17T22:05:37.202229+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag https://github.com/advisories/GHSA-m929-7fr6-cvjg 34.0.1
2024-09-17T22:00:27.472938+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj https://github.com/advisories/GHSA-4fq3-mr56-cg6r 34.0.1
2024-04-23T17:39:30.991434+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj https://github.com/advisories/GHSA-4fq3-mr56-cg6r 34.0.0rc4
2024-01-03T18:04:23.507167+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 34.0.0rc1
2024-01-03T17:40:33.820466+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj https://github.com/advisories/GHSA-4fq3-mr56-cg6r 34.0.0rc1
2024-01-03T17:40:33.761573+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag https://github.com/advisories/GHSA-m929-7fr6-cvjg 34.0.0rc1