cve-2026-47834 - MEDIUM - Spring Data JPA Sort expression validation bypass

cve-2026-47834 - MEDIUM - Spring Data JPA Sort expression validation bypass...

CVE-2026-57954

Vulnerability summary (CVE-2026-57954) Elide 7.1.17 has a flaw in SortingImpl.getValidSortingRules where @ReadPermission is not enforced on client-supplied sort expressions. This allows attackers to sort collections by forbidden fields and infer hidden field values via row ordering analysis, leak...