Is org.springframework.data:spring-data-jpa safe to use?

org.springframework.data:spring-data-jpa has 3 known vulnerabilities on the latest version (4.0.0-M3). DepScope rates its health at 50/100 (high risk).

What is the latest version of org.springframework.data:spring-data-jpa?

The latest version of org.springframework.data:spring-data-jpa is 4.0.0-M3, released 2025-05-16.

Does org.springframework.data:spring-data-jpa have known vulnerabilities?

Yes. org.springframework.data:spring-data-jpa has 3 known vulnerabilities. See depscope.dev/pkg/maven/org.springframework.data:spring-data-jpa for details.

Is org.springframework.data:spring-data-jpa deprecated?

No, org.springframework.data:spring-data-jpa is actively maintained. Latest release: 4.0.0-M3 (2025-05-16).

What are alternatives to org.springframework.data:spring-data-jpa?

DepScope has no curated alternatives for org.springframework.data:spring-data-jpa at this time.

What license does org.springframework.data:spring-data-jpa use?

org.springframework.data:spring-data-jpa is licensed under Apache-2.0.

org.springframework.data:spring-data-jpa

mavenv4.0.0-M3

Spring Data module for JPA repositories.

License Apache-2.0permissive267 versions0 deps

spring-projects/spring-data-jpa

/ 100

Health

safe to use

org.springframework.data:[email protected] is safe to use (health: 50/100)

Update to >= 1.10.4 to fix known vulnerabilities

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

19/25

security

15/15

maturity

6/15

community

Vulnerabilities

3 medium

Advisories (3)

Severity	ID	Summary	Fixed in
medium	CVE-2019-3797	Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA	2.1.6
medium	CVE-2019-3802	Improper Neutralization of Wildcards or Matching Symbols	1.11.22
medium	CVE-2016-6652	Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA	1.10.4

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/maven/org.springframework.data:spring-data-jpa

Last updated · 2025-05-16T12:33:29+00:00