HeroDevs
Visit NES for Querydsl Home Page

NES for Querydsl 5.0.x Release Notes

2 versions

Comprehensive release notes and changelog for NES for Querydsl 5.0.x, including security patches, bug fixes, and feature updates across all supported versions.

Nov 12, 2026
Latest: 5.0.2
1 Patched Vulnerability
VEX Statements

November 2026

5.0.2

Released Nov 12, 2026
CVE-2024-49203
Full Version: 
5.0.0-querydsl-5.0.2

Security Fixes

  • PathBuilderValidator.DEFAULT no longer accepts property names containing whitespace that could inject JPQL/HQL syntax (CVE-2024-49203).

Changes

  • querydsl-bom now manages com.querydsl:codegen-utils instead of the non-existent com.querydsl:querydsl-codegen-utils.

5.0.1

Released Nov 12, 2026
Full Version: 
5.0.0-querydsl-5.0.1

Notes

  • This release originates from the open‑source Querydsl repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Querydsl 5.0.0.

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.