HeroDevs
Visit NES for Spring Home Page

Spring Data REST 4.2.x Release Notes

7 versions

Comprehensive release notes and changelog for Spring Data REST 4.2.x, including security patches, bug fixes, and feature updates across all supported versions.

Jun 15, 2026
Latest: 4.2.19
21 Patched Vulnerabilities
VEX Statements

June 2026

4.2.19

Released Jun 15, 2026
CVE-2026-41728
CVE-2026-41729
CVE-2026-41730
CVE-2026-41837
Full Version: 
4.2.12-spring-data-rest-4.2.19

Bug Fixes

  • Tightened write-access checks in JsonPointerMapping so the JSON Patch implementation applies the write-access filter to intermediate path segments, preventing read-only nested properties from being mutated through multi-segment pointers (CVE-2026-41728).
  • Closed a SpEL expression injection vulnerability in JSON Patch processing of map-typed properties by rejecting invalid map keys in JSON Pointer expressions in JsonPointerMapping/SpelPath (CVE-2026-41729).
  • Stopped Spring Data REST from serializing the full exception cause chain into HTTP error response bodies, preventing disclosure of persistence-layer internals to HTTP clients (CVE-2026-41730).
  • Fixed the Querydsl integration to consider Jackson customizations before treating persistent property paths as filter keys, preventing Jackson-hidden persistent fields from being exposed as filterable properties (CVE-2026-41837).

Dependency Upgrades

  • Spring Data Build (NES) 3.2.12-spring-data-build-3.2.19
  • Spring Data Commons (NES) 3.2.12-spring-data-commons-3.2.19
  • Spring Data JPA (NES) 3.2.12-spring-data-jpa-3.2.19
  • Spring Data KeyValue (NES) 3.2.12-spring-data-keyvalue-3.2.19
  • Spring Data MongoDB (NES) 4.2.12-spring-data-mongodb-4.2.19
  • Spring Framework (NES) 6.1.21-spring-framework-6.1.28

April 2026

4.2.18

Released Apr 23, 2026
Full Version: 
4.2.12-spring-data-rest-4.2.18

Dependency Upgrades

  • Spring Data Build (NES) 3.2.12-spring-data-build-3.2.18
  • Spring Data Commons (NES) 3.2.12-spring-data-commons-3.2.18
  • Spring Data JPA (NES) 3.2.12-spring-data-jpa-3.2.18
  • Spring Data KeyValue (NES) 3.2.12-spring-data-keyvalue-3.2.18
  • Spring Data MongoDB (NES) 4.2.12-spring-data-mongodb-4.2.18
  • Spring Framework (NES) 6.1.21-spring-framework-6.1.27

March 2026

4.2.17

Released Mar 25, 2026
Full Version: 
4.2.12-spring-data-rest-4.2.17

Dependency Upgrades

  • Spring Data Build (NES) 3.2.12-spring-data-build-3.2.17
  • Spring Data Commons (NES) 3.2.12-spring-data-commons-3.2.17
  • Spring Data JPA (NES) 3.2.12-spring-data-jpa-3.2.17
  • Spring Data KeyValue (NES) 3.2.12-spring-data-keyvalue-3.2.17
  • Spring Data MongoDB (NES) 4.2.12-spring-data-mongodb-4.2.17
  • Spring Framework (NES) 6.1.21-spring-framework-6.1.26

October 2025

4.2.16

Released Oct 24, 2025
Full Version: 
4.2.12-spring-data-rest-4.2.16

Dependency Upgrades

  • Spring Data Build (NES) 3.2.12-spring-data-build-3.2.16
  • Spring Data Commons (NES) 3.2.12-spring-data-commons-3.2.16
  • Spring Data JPA (NES) 3.2.12-spring-data-jpa-3.2.16
  • Spring Data KeyValue (NES) 3.2.12-spring-data-keyvalue-3.2.16
  • Spring Data MongoDB (NES) 4.2.12-spring-data-mongodb-4.2.16
  • Spring Framework (NES) 6.1.21-spring-framework-6.1.25

September 2025

4.2.15

Released Sep 23, 2025
Full Version: 
4.2.12-spring-data-rest-4.2.15

Dependency Upgrades

  • Spring Data Build (NES) 3.2.12-spring-data-build-3.2.15
  • Spring Data Commons (NES) 3.2.12-spring-data-commons-3.2.15
  • Spring Data JPA (NES) 3.2.12-spring-data-jpa-3.2.15
  • Spring Data KeyValue (NES) 3.2.12-spring-data-keyvalue-3.2.15
  • Spring Data MongoDB (NES) 4.2.12-spring-data-mongodb-4.2.15
  • Spring Framework (NES) 6.1.21-spring-framework-6.1.24

August 2025

4.2.14

Released Aug 22, 2025
Full Version: 
4.2.12-spring-data-rest-4.2.14

Dependency Upgrades

  • Spring Data Build (NES) 3.2.12-spring-data-build-3.2.14
  • Spring Data Commons (NES) 3.2.12-spring-data-commons-3.2.14
  • Spring Data JPA (NES) 3.2.12-spring-data-jpa-3.2.14
  • Spring Data KeyValue (NES) 3.2.12-spring-data-keyvalue-3.2.14
  • Spring Data MongoDB (NES) 4.2.12-spring-data-mongodb-4.2.14

July 2025

4.2.13

Released Jul 15, 2025
Full Version: 
4.2.12-spring-data-rest-4.2.13

Notes

  • This release originates from the open‑source Spring Data REST repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data REST 4.2.12.

Dependency Upgrades

  • Spring Data Build (NES) 3.2.12-spring-data-build-3.2.13
  • Spring Data Commons (NES) 3.2.12-spring-data-commons-3.2.13
  • Spring Data JPA (NES) 3.2.12-spring-data-jpa-3.2.13
  • Spring Data KeyValue (NES) 3.2.12-spring-data-keyvalue-3.2.13
  • Spring Data MongoDB (NES) 4.2.12-spring-data-mongodb-4.2.13Full Version: 4.2.12-spring-data-rest-4.2.13

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.