Package Health/org.springframework.data:spring-data-jpa

spring-data-jpa

Spring Data module for JPA repositories.

Latest 4.2.0-M2org.springframework.data

Maven

88%

Total Score

healthy

Healthy, backed by long release history and signed Maven provenance; this release is a prerelease.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

The major line is established, but 4.2.0-M2 is explicitly a prerelease, so consumers should expect possible API or behavior changes before final release.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-560146 spring-data-jpa is vulnerable to SQL Injection in versions 3.0.0 - 4.0.6 and 4.1.0 - 4.1.0.	3.0.0 - 4.0.64.1.0 - 4.1.0	Medium
CVE-2016-6652 org.springframework.data:spring-data-jpa is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 1.9.6 and 1.10.0 - 1.10.4.	0.0.0 - 1.9.61.10.0 - 1.10.4	Medium
CVE-2019-3802 org.springframework.data:spring-data-jpa is vulnerable to Improper Neutralization of Wildcards or Matching Symbols in versions 0.0.0 - 1.11.22, 2.1.0 - 2.1.8 and 2.0.0 - 2.0.14.	0.0.0 - 1.11.222.0.0 - 2.0.142.1.0 - 2.1.8	Medium
CVE-2019-3797 org.springframework.data:spring-data-jpa is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 1.11.20, 2.0.0 - 2.0.14 and 2.1.0 - 2.1.6.	0.0.0 - 1.11.202.0.0 - 2.0.142.1.0 - 2.1.6	Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
${project.groupId}:spring-data-commons Version 4.2.0-M2	—	—
org.springframework:spring-orm Version *	—	—
org.springframework:spring-context Version *	—	—
org.springframework:spring-aop Version *	—	—
org.aspectj:aspectjrt Version 1.9.25.1	—	—