Search for packages
Package details: pkg:maven/org.springframework.data/spring-data-commons@1.13.5.RELEASE
purl pkg:maven/org.springframework.data/spring-data-commons@1.13.5.RELEASE
Next non-vulnerable version 1.13.12.RELEASE
Latest non-vulnerable version 2.0.7.RELEASE
Risk 10.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-dam4-ygz5-aaaj
Aliases:
CVE-2018-1273
GHSA-4fq3-mr56-cg6r
Remote code injection vulnerability in org.springframework.data:spring-data-commons
1.13.11
Affected by 0 other vulnerabilities.
1.13.11.RELEASE
Affected by 1 other vulnerability.
2.0.6
Affected by 0 other vulnerabilities.
2.0.6.RELEASE
Affected by 1 other vulnerability.
VCID-t5ah-yp4n-aaag
Aliases:
CVE-2018-1259
GHSA-m929-7fr6-cvjg
Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references
1.13.12
Affected by 0 other vulnerabilities.
1.13.12.RELEASE
Affected by 0 other vulnerabilities.
2.0.7
Affected by 0 other vulnerabilities.
2.0.7.RELEASE
Affected by 0 other vulnerabilities.
VCID-wt73-58ea-aaac
Aliases:
CVE-2018-1274
GHSA-5q8m-mqmx-pxp9
Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation
1.13.11
Affected by 0 other vulnerabilities.
1.13.11.RELEASE
Affected by 1 other vulnerability.
2.0.6
Affected by 0 other vulnerabilities.
2.0.6.RELEASE
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T14:17:39.651051+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag None 36.1.3
2025-06-20T14:17:32.635674+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 36.1.3
2025-06-20T14:02:04.500282+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 36.1.3
2025-06-20T14:02:01.472423+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac None 36.1.3
2025-06-20T14:01:56.593133+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 36.1.3
2025-06-20T14:01:55.811691+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 36.1.3
2025-06-03T21:03:52.776604+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag None 36.1.0
2025-06-03T21:03:45.912621+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 36.1.0
2025-06-03T20:54:05.508577+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 36.1.0
2025-06-03T20:54:02.216632+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac None 36.1.0
2025-06-03T20:53:57.322402+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 36.1.0
2025-06-03T20:53:56.359808+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 36.1.0
2025-06-02T20:43:36.628196+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag None 36.1.2
2025-06-02T20:43:28.708465+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 36.1.2
2025-06-02T20:33:51.470459+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 36.1.2
2025-06-02T20:33:48.124908+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac None 36.1.2
2025-06-02T20:33:43.049417+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 36.1.2
2025-06-02T20:33:42.113938+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 36.1.2
2025-04-03T17:04:34.657488+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag None 36.0.0
2025-04-03T17:04:16.393034+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 36.0.0
2025-04-03T16:51:02.224215+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 36.0.0
2025-04-03T16:50:55.281367+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac None 36.0.0
2025-04-03T16:50:45.526876+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 36.0.0
2025-04-03T16:50:43.769551+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 36.0.0
2025-02-18T06:56:04.725801+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag None 35.1.0
2025-02-18T06:56:04.343623+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 35.1.0
2025-02-17T22:54:48.333621+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac None 35.1.0
2025-02-17T22:54:48.152762+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 35.1.0
2025-02-17T22:54:47.604926+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 35.1.0
2025-02-17T22:54:47.196658+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 35.1.0
2024-11-21T02:40:42.856690+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 35.0.0
2024-11-20T22:14:18.442975+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 35.0.0
2024-11-20T22:14:18.228105+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 35.0.0
2024-11-19T02:30:52.567917+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 34.3.2
2024-11-18T22:10:10.388428+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 34.3.2
2024-11-18T22:10:10.191326+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.3.2
2024-10-08T03:05:51.893700+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 34.0.2
2024-10-07T23:10:30.094397+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 34.0.2
2024-10-07T23:10:29.883581+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.2
2024-10-07T17:40:05.893388+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac https://github.com/advisories/GHSA-5q8m-mqmx-pxp9 34.0.2
2024-10-07T17:40:05.299995+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj https://github.com/advisories/GHSA-4fq3-mr56-cg6r 34.0.2
2024-10-07T17:40:00.254993+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag https://github.com/advisories/GHSA-m929-7fr6-cvjg 34.0.2
2024-09-23T03:02:19.767597+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 34.0.1
2024-09-22T23:25:14.787183+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 34.0.1
2024-09-22T23:25:14.612175+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.1
2024-09-22T18:11:52.015795+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac https://github.com/advisories/GHSA-5q8m-mqmx-pxp9 34.0.1
2024-09-22T18:11:51.394645+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj https://github.com/advisories/GHSA-4fq3-mr56-cg6r 34.0.1
2024-09-22T18:11:45.988295+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag https://github.com/advisories/GHSA-m929-7fr6-cvjg 34.0.1
2024-04-24T05:37:05.978125+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag None 34.0.0rc4
2024-04-24T05:37:05.747547+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 34.0.0rc4
2024-04-24T01:21:10.117456+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 34.0.0rc4
2024-04-24T01:21:09.911564+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc4
2024-04-24T01:21:09.703003+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.0rc4
2024-04-24T01:21:09.269025+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc4
2024-04-23T19:01:14.726585+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc4
2024-04-23T19:01:14.213320+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac https://github.com/advisories/GHSA-5q8m-mqmx-pxp9 34.0.0rc4
2024-04-23T19:01:12.760810+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj https://github.com/advisories/GHSA-4fq3-mr56-cg6r 34.0.0rc4
2024-04-23T19:01:12.119541+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc4
2024-04-23T19:00:48.886076+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag https://github.com/advisories/GHSA-m929-7fr6-cvjg 34.0.0rc4
2024-04-23T19:00:48.712440+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag None 34.0.0rc4
2024-01-10T08:08:48.083113+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag None 34.0.0rc2
2024-01-10T08:08:47.845655+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 34.0.0rc2
2024-01-10T03:49:59.891748+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 34.0.0rc2
2024-01-10T03:49:59.686326+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc2
2024-01-10T03:49:59.472206+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.0rc2
2024-01-10T03:49:59.045563+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc2
2024-01-09T20:53:19.602703+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac https://github.com/advisories/GHSA-5q8m-mqmx-pxp9 34.0.0rc2
2024-01-09T20:53:19.028003+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc2
2024-01-09T20:53:17.920667+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj https://github.com/advisories/GHSA-4fq3-mr56-cg6r 34.0.0rc2
2024-01-09T20:53:17.297956+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc2
2024-01-09T20:53:00.047756+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag https://github.com/advisories/GHSA-m929-7fr6-cvjg 34.0.0rc2
2024-01-09T20:52:59.873464+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag None 34.0.0rc2
2024-01-04T00:54:10.116210+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag None 34.0.0rc1
2024-01-04T00:54:09.882007+00:00 GitLab Importer Affected by VCID-t5ah-yp4n-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1259.yml 34.0.0rc1
2024-01-03T20:27:14.201777+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1274.yml 34.0.0rc1
2024-01-03T20:27:13.990825+00:00 GitLab Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc1
2024-01-03T20:27:13.763862+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework.data/spring-data-commons/CVE-2018-1273.yml 34.0.0rc1
2024-01-03T20:27:13.323075+00:00 GitLab Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc1
2024-01-03T16:03:35.050481+00:00 GHSA Importer Affected by VCID-wt73-58ea-aaac None 34.0.0rc1
2024-01-03T16:03:33.678293+00:00 GHSA Importer Affected by VCID-dam4-ygz5-aaaj None 34.0.0rc1
2024-01-03T16:03:21.354683+00:00 GHSA Importer Affected by VCID-t5ah-yp4n-aaag None 34.0.0rc1