Spring Data REST 3.7.x Release Notes

9 versions

Comprehensive release notes and changelog for Spring Data REST 3.7.x, including security patches, bug fixes, and feature updates across all supported versions.

Jun 15, 2026

Latest: 3.7.27

21 Patched Vulnerabilities

VEX Statements

June 2026

3.7.27

Released Jun 15, 2026

Full Version:

3.7.18-spring-data-rest-3.7.27

Bug Fixes

Tightened write-access checks in JsonPointerMapping so the JSON Patch implementation applies the write-access filter to intermediate path segments, preventing read-only nested properties from being mutated through multi-segment pointers (CVE-2026-41728).
Closed a SpEL expression injection vulnerability in JSON Patch processing of map-typed properties by rejecting invalid map keys in JSON Pointer expressions in JsonPointerMapping/SpelPath (CVE-2026-41729).
Stopped Spring Data REST from serializing the full exception cause chain into HTTP error response bodies, preventing disclosure of persistence-layer internals to HTTP clients (CVE-2026-41730).
Fixed the Querydsl integration to consider Jackson customizations before treating persistent property paths as filter keys, preventing Jackson-hidden persistent fields from being exposed as filterable properties (CVE-2026-41837).

Dependency Upgrades

Spring Data Build (NES) 2.7.18-spring-data-build-2.7.27
Spring Data Commons (NES) 2.7.18-spring-data-commons-2.7.27
Spring Data JPA (NES) 2.7.18-spring-data-jpa-2.7.27
Spring Data KeyValue (NES) 2.7.18-spring-data-keyvalue-2.7.27
Spring Data MongoDB (NES) 3.4.18-spring-data-mongodb-3.4.27
Spring Data for Apache Cassandra (NES) 3.4.18-spring-data-cassandra-3.4.27

April 2026

3.7.26

Released Apr 23, 2026

Full Version:

3.7.18-spring-data-rest-3.7.26

Dependency Upgrades

Spring Data Build (NES) 2.7.18-spring-data-build-2.7.26
Spring Data Commons (NES) 2.7.18-spring-data-commons-2.7.26
Spring Data JPA (NES) 2.7.18-spring-data-jpa-2.7.26
Spring Data KeyValue (NES) 2.7.18-spring-data-keyvalue-2.7.26
Spring Data MongoDB (NES) 3.4.18-spring-data-mongodb-3.4.26
Spring Data for Apache Cassandra (NES) 3.4.18-spring-data-cassandra-3.4.26

March 2026

3.7.25

Released Mar 25, 2026

Full Version:

3.7.18-spring-data-rest-3.7.25

Dependency Upgrades

Spring Data Build (NES) 2.7.18-spring-data-build-2.7.25
Spring Data Commons (NES) 2.7.18-spring-data-commons-2.7.25
Spring Data JPA (NES) 2.7.18-spring-data-jpa-2.7.25
Spring Data KeyValue (NES) 2.7.18-spring-data-keyvalue-2.7.25
Spring Data MongoDB (NES) 3.4.18-spring-data-mongodb-3.4.25
Spring Data for Apache Cassandra (NES) 3.4.18-spring-data-cassandra-3.4.25

October 2025

3.7.24

Released Oct 23, 2025

Full Version:

3.7.18-spring-data-rest-3.7.24

Dependency Upgrades

Spring Data Build (NES) 2.7.18-spring-data-build-2.7.24
Spring Data Commons (NES) 2.7.18-spring-data-commons-2.7.24
Spring Data JPA (NES) 2.7.18-spring-data-jpa-2.7.24
Spring Data KeyValue (NES) 2.7.18-spring-data-keyvalue-2.7.24
Spring Data MongoDB (NES) 3.4.18-spring-data-mongodb-3.4.24
Spring Data for Apache Cassandra (NES) 3.4.18-spring-data-cassandra-3.4.24

September 2025

3.7.23

Released Sep 23, 2025

Full Version:

3.7.18-spring-data-rest-3.7.23

Dependency Upgrades

Spring Data Build (NES) 2.7.18-spring-data-build-2.7.23
Spring Data for Apache Cassandra (NES) 3.4.18-spring-data-cassandra-3.4.23
Spring Data Commons (NES) 2.7.18-spring-data-commons-2.7.23
Spring Data JPA (NES) 2.7.18-spring-data-jpa-2.7.23
Spring Data KeyValue (NES) 2.7.18-spring-data-keyvalue-2.7.23
Spring Data MongoDB (NES) 3.4.18-spring-data-mongodb-3.4.23

August 2025

3.7.22

Released Aug 25, 2025

Full Version:

3.7.18-spring-data-rest-3.7.22

Dependency Upgrades

Spring Data Build (NES) 2.7.18-spring-data-build-2.7.22
Spring Data Commons (NES) 2.7.18-spring-data-commons-2.7.22
Spring Data for Apache Cassandra (NES) 3.4.18-spring-data-cassandra-3.4.22
Spring Data JPA (NES) 2.7.18-spring-data-jpa-2.7.22
Spring Data KeyValue (NES) 2.7.18-spring-data-keyvalue-2.7.22
Spring Data MongoDB (NES) 3.4.18-spring-data-mongodb-3.4.22

May 2025

3.7.21

Released May 19, 2025

Full Version:

3.7.18-spring-data-rest-3.7.21

Dependency Upgrades

Spring Data Build: 2.7.18-spring-data-build-2.7.21
Spring Data Cassandra: 3.4.18-spring-data-cassandra-3.4.21
Spring Data Commons: 2.7.18-spring-data-commons-2.7.21
Spring Data JPA: 2.7.18-spring-data-jpa-2.7.21
Spring Data KeyValue: 2.7.18-spring-data-keyvalue-2.7.21
Spring Data MongoDB: 3.4.18-spring-data-mongodb-3.4.21

February 2025

3.7.20

Released Feb 24, 2025

Full Version:

3.7.18-spring-data-rest-3.7.20

Notes

Publish Spring Data REST under the org.springframework.data group ID instead of com.herodevs.nes.springframework.data

Dependency Upgrades

Spring Data Build: 2.7.18-spring-data-build-2.7.20
Spring Data Cassandra: 3.4.18-spring-data-cassandra-3.4.20
Spring Data Commons: 2.7.18-spring-data-commons-2.7.20
Spring Data JPA: 2.7.18-spring-data-jpa-2.7.20
Spring Data KeyValue: 2.7.18-spring-data-keyvalue-2.7.20
Spring Data MongoDB: 3.4.18-spring-data-mongodb-3.4.20

November 2024

3.7.19

Released Nov 12, 2024

Full Version:

3.7.18-spring-data-rest-3.7.19

Notes

This release originates from the open‑source Spring Data REST repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Data REST 3.7.18. Full Version: 3.7.18-spring-data-rest-3.7.19

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.

New releases published regularly — check back often for the latest security updates

$ cat features.txt

Security Patches
Regular updates to keep your applications secure
CVE Remediation
Rapid response to critical vulnerabilities
Expert Support
Direct access to our development team