Is org.springframework.data:spring-data-mongodb safe to use?

org.springframework.data:spring-data-mongodb has 1 known vulnerabilities on the latest version (5.0.0-M3). DepScope rates its health at 46/100 (high risk).

What is the latest version of org.springframework.data:spring-data-mongodb?

The latest version of org.springframework.data:spring-data-mongodb is 5.0.0-M3, released 2025-05-16.

Does org.springframework.data:spring-data-mongodb have known vulnerabilities?

Yes. org.springframework.data:spring-data-mongodb has 1 known vulnerabilities. See depscope.dev/pkg/maven/org.springframework.data:spring-data-mongodb for details.

Is org.springframework.data:spring-data-mongodb deprecated?

No, org.springframework.data:spring-data-mongodb is actively maintained. Latest release: 5.0.0-M3 (2025-05-16).

What are alternatives to org.springframework.data:spring-data-mongodb?

DepScope has no curated alternatives for org.springframework.data:spring-data-mongodb at this time.

What license does org.springframework.data:spring-data-mongodb use?

org.springframework.data:spring-data-mongodb is licensed under Apache-2.0.

org.springframework.data:spring-data-mongodb

mavenv5.0.0-M3

MongoDB support for Spring Data

License Apache-2.0permissive264 versions0 deps

spring-projects/spring-data-mongodb

/ 100

Health

do not use

org.springframework.data:spring-data-mongodb has critical vulnerabilities — do not use

Update to >= 3.3.5 to fix known vulnerabilities

1 critical vulnerabilities

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

15/25

security

15/15

maturity

6/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	CVE-2022-22980	SpEL Injection in Spring Data MongoDB	3.3.5

Threat intelligence

1 likely exploited (EPSS ≥ 0.5)

Threat tier per vulnerability derived from CISA KEV catalog + FIRST.org EPSS scores.

OSS Scorecard

OpenSSF security posture score

6.1/10

moderate

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

1,677

single active maintainer 3m

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/maven/org.springframework.data:spring-data-mongodb

Last updated · 2025-05-16T12:33:54+00:00