CVE-2019-3797

Medium

Advisory

Published 14 May 2019In the index since 8 Sept 2026

Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
spring-data-jpamaven	1.10.4.RELEASE, 2.0.9.RELEASE	1.11.20, 2.0.14	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 1 container images this version deploys carry CVE-2019-3797.

Container image	Digest	Package	Fixed in
polyakov/hapi-fhir-jpaserver-example :latest	dbcef69146b8	spring-data-jpa@1.10.4.RELEASE	1.11.20

6,362

1 of the 1 container images this version deploys carry CVE-2019-3797.

Container image	Digest	Package	Fixed in
kimb88/hello-world-spring-boot :latest	0639155241cb	spring-data-jpa@2.0.9.RELEASE	2.0.14

6,451

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
kimb88/hello-world-spring-boot :latest	0639155241cb	spring-data-jpa@2.0.9.RELEASE	2.0.14	1
polyakov/hapi-fhir-jpaserver-example :latest	dbcef69146b8	spring-data-jpa@1.10.4.RELEASE	1.11.20	1