CLEANSTART-2026-VJ67556 Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPaylo...

🗓️ 01 Oct 2026 00:35:34Reported by GoogleType

osv🔗 osv.dev👁 5 Views

DoS in Spring Data Commons if Spring Data Web Support uses @ProjectedPayload.

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-data-commons jar	27 Jul 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	18 Aug 202604:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Data Commons [CVE-2026-41695, CVE-2026-41711, CVE-2026-41716, CVE-2026-41721 ]	27 Jul 202620:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods API Management	28 Aug 202604:56	–	ibm
Chainguard	CVE-2026-41721 vulnerabilities	22 Aug 202620:26	–	cgr
CNNVD	VMware Spring Data Commons 资源管理错误漏洞	10 Jun 202600:00	–	cnnvd
CVE	CVE-2026-41721	9 Jun 202623:48	–	cve
Cvelist	CVE-2026-41721 Spring Data Commons Denial of Service via Data Binding	9 Jun 202623:48	–	cvelist
EUVD	EUVD-2026-35902	10 Jun 202600:31	–	euvd
F5 Networks	K000162315: Multiple Spring framework vulnerabilities	17 Jul 202609:23	–	f5

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VJ67556.json
osv	www.osv.dev/vulnerability/CVE-2026-41721
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41721

08 Oct 2026 16:47Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.9

EPSS0.00443

Spring Data Commons apache-nifi DoS Spring Data Web Support @ProjectedPayload