HeroDevs
Visit NES for Spring Home Page

Spring Data MongoDB 4.4.x Release Notes

4 versions

Comprehensive release notes and changelog for Spring Data MongoDB 4.4.x, including security patches, bug fixes, and feature updates across all supported versions.

Jun 15, 2026
Latest: 4.4.17
10 Patched Vulnerabilities
VEX Statements

June 2026

4.4.17

Released Jun 15, 2026
CVE-2026-41696
CVE-2026-41717
Full Version: 
4.4.13-spring-data-mongodb-4.4.17

Bug Fixes

  • Hardened regex parameter binding for @Query-annotated repository methods so crafted strings can no longer escape regex quoting to access unauthorized data (CVE-2026-41696).
  • Fixed a SpEL injection vulnerability during parameter binding for @Query-annotated repository methods by avoiding double-decoding of JSON in ParameterBindingDocumentCodec (CVE-2026-41717).

Dependency Upgrades

  • Spring Data Build (NES) 3.4.13-spring-data-build-3.4.17
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.17

April 2026

4.4.16

Released Apr 23, 2026
Full Version: 
4.4.13-spring-data-mongodb-4.4.16

Dependency Upgrades

  • Spring Data Build (NES) 3.4.13-spring-data-build-3.4.16
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.16

March 2026

4.4.15

Released Mar 25, 2026
Full Version: 
4.4.13-spring-data-mongodb-4.4.15

Dependency Upgrades

  • Spring Data Build (NES) 3.4.13-spring-data-build-3.4.15
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.15

January 2026

4.4.14

Released Jan 28, 2026
Full Version: 
4.4.13-spring-data-mongodb-4.4.14

Notes

  • This release originates from the open‑source Spring Data MongoDB repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data MongoDB 4.4.13.

Dependency Upgrades

  • Spring Data Build (NES) 3.4.13-spring-data-build-3.4.14
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.14

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.