On behalf of the team, I’m pleased to announce Spring Data service releases 2021.2.1 and 2021.1.5. Both releases ship with a fix for mostly bug fixes and dependency upgrades. For your convenience, Spring Boot 2.7.1 respective 2.6.9 are going to pick up these releases in the upcoming days.

In addition, these releases include fixes for one vulnerability:

• CVE-2022-22980 "Spring Data MongoDB SpEL Expression Injection Vulnerability"

SpEL injection attack in MongoDB applications through repository query methods annotated with @Query or @Aggregation using parametrized SpEL statements with non-sanitized input. Severity: High

These new versions are recommended upgrades for all Spring Data production scenarios.

To round things off, here are the links to the individual modules, changelogs, and documentation:

2021.2.1

• Spring Data Commons 2.7.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JDBC 2.4.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JPA 2.7.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Geode 2.7.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Neo4j 6.3.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data KeyValue 2.7.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data MongoDB 3.4.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 3.4.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data R2DBC 1.5.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data LDAP 2.7.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Envers 2.7.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data REST 3.7.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Redis 2.7.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Elasticsearch 4.4.1 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Couchbase 4.4.1 - Artifacts - Javadoc - Documentation - Changelog

2021.1.5

• Spring Data Commons 2.6.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JDBC 2.3.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data JPA 2.6.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Geode 2.6.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Neo4j 6.2.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data KeyValue 2.6.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data MongoDB 3.3.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data for Apache Cassandra 3.3.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data R2DBC 1.4.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data LDAP 2.6.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Envers 2.6.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data REST 3.6.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Redis 2.6.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Elasticsearch 4.3.5 - Artifacts - Javadoc - Documentation - Changelog
• Spring Data Couchbase 4.3.5 - Artifacts - Javadoc - Documentation - Changelog