Spring Data 2021.2.1 and 2021.1.5 released
On behalf of the team, I’m pleased to announce Spring Data service releases 2021.2.1
and 2021.1.5
.
Both releases ship with a fix for mostly bug fixes and dependency upgrades.
For your convenience, Spring Boot 2.7.1
respective 2.6.9
are going to pick up these releases in the upcoming days.
In addition, these releases include fixes for one vulnerability:
- CVE-2022-22980 "Spring Data MongoDB SpEL Expression Injection Vulnerability"
SpEL injection attack in MongoDB applications through repository query methods annotated with @Query
or @Aggregation
using parametrized SpEL statements with non-sanitized input.
Severity: …