security.nuyts.tech
CVE-2022-22980 – NuytsTech Security
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain q