Zum Hauptinhalt springen

Patch 2025.2.8 / CVEs

CVE Spring Framework​

Three vulnerabilities CVE-2026-41851, CVE-2026-41842, and CVE-2026-41850 have been disclosed, affecting the Spring Framework. The INFOMOTION Data Management Center (DMC) includes the Spring Framework as part of its package.

Based on our analysis, we do not believe Data Management Center to be impacted by these vulnerabilities. Two of them (CVE-2026-41851 and CVE-2026-41850) affect applications that evaluate user-supplied Spring Expression Language (SpEL) expressions, which DMC does not support. The third (CVE-2026-41842) affects applications making use of Spring's versioned static resource handling, which DMC does not employ.

Nonetheless, we are now releasing an updated version 2025.2.8 of Data Management Center that includes a patched version of the Spring Framework.

Features​

  • Snowflake merge inline threshold and insert chunk size are now configurable via environment variables (DMC_SNOWFLAKE_MERGE_INLINE_THRESHOLD, DMC_SNOWFLAKE_INSERT_CHUNK_SIZE)

Bugfixes​

  • Snowflake sync no longer fails on very large tables
  • Table filters now work correctly for date, boolean column types on Postgres
  • Eliminated race condition when inserting categories that could cause data corruption under concurrent load
  • Table title and category name now update correctly in the navbar after a rename
  • Sidebar now refreshes correctly when category information changes
  • Category insert and update requests are now serialized to preserve input order and prevent duplicate sort_order values under concurrent inserts

Performance​

  • Snowflake sync is now properly batched significantly reducing load for large sync operations
  • Bulk merge import is significantly faster on large tables
  • CSV/Excel import performance is substantially improved for large tables when data permissions are active
  • Fixed stale data permission checks, when table-level permissions were disabled

(since 2025.2.7)

Container Image: infomotiondmc.azurecr.io/dmc@sha256:645fbadbea16fd6e80de70e1b531b0783dcaa931cd77ac946c23712fbf831d18

WAR File : https://dmcwiki.blob.core.windows.net/dmc-releases/2025.2.8/dmc.war (sha256: a729519aa7f116ef22d5ee0150b8ce9fe77964f74756a65ab59e516ddf79ed51)