[High] CVE-2026-41717 – Spring Data MongoDB contains a SpEL (Spring Expression Language) expression inje...
High CVE-2026-41717 Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring...