Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Spring Data MongoDB update prevents remote code risk
published 1 month ago
Summary
The Spring Data MongoDB library and related packages have a security weakness that could let an attacker run code on your server. TuxCare has released a new version that removes this risk. Apply the updated version (4.3.12-tuxcare.2) as soon as possible.
What to do
- Update springframework org.springframework.data:spring-data-mongodb to version 4.3.12-tuxcare.2.
- Update springframework org.springframework.data:spring-data-mongodb-distribution to version 4.3.12-tuxcare.2.
- Update springframework org.springframework.data:spring-data-mongodb-parent to version 4.3.12-tuxcare.2.
- Update org.springframework.data:spring-data-mongodb to version 4.3.12-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | springframework | org.springframework.data:spring-data-mongodb |
< 4.3.12-tuxcare.2 Fix: upgrade to 4.3.12-tuxcare.2
|
| TuxCare:Maven | springframework | org.springframework.data:spring-data-mongodb-distribution |
< 4.3.12-tuxcare.2 Fix: upgrade to 4.3.12-tuxcare.2
|
| TuxCare:Maven | springframework | org.springframework.data:spring-data-mongodb-parent |
< 4.3.12-tuxcare.2 Fix: upgrade to 4.3.12-tuxcare.2
|
| TuxCare:Maven | – | org.springframework.data:spring-data-mongodb |
>= 4.3.12, < 4.3.12-tuxcare.2 Fix: upgrade to 4.3.12-tuxcare.2
|
Original advisory text
TuxCare security update for org.springframework.data:spring-data-mongodb (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-mongodb to address 1 CVE. Fixed in 4.3.12-tuxcare.2.
Timeline
Published24 Sep 2026
Updated30 Oct 2026
First seen24 Sep 2026
Sources
CLSA-2026-1790246710 · OSV
Track software like this
Free during beta