Spring Data REST

2 known vulnerabilities in Spring Data REST, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-47849 CVSS 7.1 high Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON Patch…
CVE-2026-47850 CVSS 4.3 medium Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an…