Unrated severityNVD Advisory· Published Aug 26, 2026
Spring Data REST allows mutation of the version property of immutable aggregates via PUT
CVE-2026-47850
Description
Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7.20 and earlier
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 5.1.0, 5.0.0 - 5.0.6, 4.5.0 - 4.5.12, 4.0.0 - 4.4.15, <=3.7.20
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.