CVE-2026-47850

Name of the Vulnerable Software and Affected Versions Spring Data REST versions 3.7.20 and earlier Spring Data REST versions 4.0.0 through 4.4.15 Spring Data REST versions 4.5.0 through 4.5.12 Spring Data REST versions 5.0.0 through 5.0.6 Spring Data REST version 5.1.0

Description An issue exists where the software fails to preserve the persisted version @Version property of an aggregate root when processing an HTTP PUT request against an immutable target type.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.