CVE-2026-41840
Spring Framework Denial of Service via Multipart Requests in WebFlux
5.9 MediumFix available
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, 5.3.0 through 5.3.48.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.27%Up 0.2 points since Jun 9, 2026
What each source reports
CVE List Score used
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, 5.3.0 through 5.3.48.
- Record
CVE-2026-41840- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-401
- Updated
- 2026-11-02
EUVDEUVD-2026-35327
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, 5.3.0 through 5.3.48.
- Record
EUVD-2026-35327- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-83f7-v6px-pp3h
Spring Framework Denial of Service via Multipart Requests in WebFlux
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests.
Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
- Record
GHSA-83f7-v6px-pp3h- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400, CWE-401
- Updated
- 2026-11-02
NVD
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, 5.3.0 through 5.3.48.
- Record
CVE-2026-41840- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-401
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-41840
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, 5.3.0 through 5.3.48.
- Record
DEBIAN-CVE-2026-41840- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-83f7-v6px-pp3h
Spring Framework Denial of Service via Multipart Requests in WebFlux
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests.
Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
- Record
GHSA-83f7-v6px-pp3h- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400, CWE-401
- Updated
- 2026-11-02
Show 29 moreShow less
OSVUBUNTU-CVE-2026-41840
Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, 5.3.0 through 5.3.48.
- Record
UBUNTU-CVE-2026-41840- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1785952964 No score
TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 14 CVEs. Fixed in 6.2.15-tuxcare.3.
- Record
CLSA-2026-1785952964- Updated
- 2026-11-02
OSVCLSA-2026-1785969383 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 4 CVEs. Fixed in 5.3.39-tuxcare.18.
- Record
CLSA-2026-1785969383- Updated
- 2026-11-02
OSVCLSA-2026-1787728788 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 5 org.springframework packages to address 9 CVEs. Fixed in 6.2.13-tuxcare.1.
- Record
CLSA-2026-1787728788- Updated
- 2026-11-02
OSVCLSA-2026-1788253139 No score
TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 8 org.springframework packages to address 20 CVEs. Fixed in 6.2.1-tuxcare.4.
- Record
CLSA-2026-1788253139- Updated
- 2026-11-02
OSVCLSA-2026-1789218209 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 6.1.21-tuxcare.13.
- Record
CLSA-2026-1789218209- Updated
- 2026-11-02
OSVCLSA-2026-1789722420 No score
TuxCare security update for org.springframework (34 CVEs)
TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 6.2.12-tuxcare.1.
- Record
CLSA-2026-1789722420- Updated
- 2026-11-02
OSVCLSA-2026-1790068772 No score
TuxCare security update for org.springframework (36 CVEs)
TuxCare rebuilt 11 org.springframework packages to address 36 CVEs. Fixed in 6.1.18-tuxcare.1.
- Record
CLSA-2026-1790068772- Updated
- 2026-11-02
OSVCLSA-2026-1790068919 No score
TuxCare security update for org.springframework (33 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 33 CVEs. Fixed in 6.2.14-tuxcare.1.
- Record
CLSA-2026-1790068919- Updated
- 2026-11-02
OSVCLSA-2026-1790082496 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 6.1.20-tuxcare.11.
- Record
CLSA-2026-1790082496- Updated
- 2026-11-02
OSVCLSA-2026-1790082526 No score
TuxCare security update for org.springframework:spring-webflux (1 CVE)
TuxCare rebuilt org.springframework:spring-webflux to address 1 CVE. Fixed in 6.1.19-tuxcare.5.
- Record
CLSA-2026-1790082526- Updated
- 2026-11-02
OSVCLSA-2026-1790694250 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.3.33-tuxcare.2.
- Record
CLSA-2026-1790694250- Updated
- 2026-11-02
OSVCLSA-2026-1791280908 No score
TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 10 CVEs. Fixed in 6.0.23-tuxcare.11.
- Record
CLSA-2026-1791280908- Updated
- 2026-11-02
OSVCLSA-2026-1791281988 No score
TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 6.1.16-tuxcare.7.
- Record
CLSA-2026-1791281988- Updated
- 2026-11-02
OSVCLSA-2026-1791390736 No score
TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 6.0.16-tuxcare.10.
- Record
CLSA-2026-1791390736- Updated
- 2026-11-02
OSVCLSA-2026-1792584150 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 6.1.13-tuxcare.4.
- Record
CLSA-2026-1792584150- Updated
- 2026-11-02
OSVCLSA-2026-1792585518 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 8 CVEs. Fixed in 6.0.12-tuxcare.6.
- Record
CLSA-2026-1792585518- Updated
- 2026-11-02
OSVCLSA-2026-1792585696 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 8 CVEs. Fixed in 6.0.11-tuxcare.6.
- Record
CLSA-2026-1792585696- Updated
- 2026-11-02
OSVCLSA-2026-1792587283 No score
TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 9 CVEs. Fixed in 6.0.0-tuxcare.5.
- Record
CLSA-2026-1792587283- Updated
- 2026-11-02
OSVCLSA-2026-1792588215 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 8 CVEs. Fixed in 6.0.14-tuxcare.2.
- Record
CLSA-2026-1792588215- Updated
- 2026-11-02
OSVCLSA-2026-1792590675 No score
TuxCare security update for org.springframework (32 CVEs)
TuxCare rebuilt 9 org.springframework packages to address 32 CVEs. Fixed in 6.2.7-tuxcare.1.
- Record
CLSA-2026-1792590675- Updated
- 2026-11-02
OSVCLSA-2026-1792591234 No score
TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 8 CVEs. Fixed in 6.0.13-tuxcare.6.
- Record
CLSA-2026-1792591234- Updated
- 2026-11-02
OSVCLSA-2026-1792599701 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 7 CVEs. Fixed in 5.3.32-tuxcare.2.
- Record
CLSA-2026-1792599701- Updated
- 2026-11-02
OSVCLSA-2026-1792600420 No score
TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 6 org.springframework packages to address 7 CVEs. Fixed in 6.0.15-tuxcare.5.
- Record
CLSA-2026-1792600420- Updated
- 2026-11-02
OSVCLSA-2026-1792600478 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 6.1.4-tuxcare.8.
- Record
CLSA-2026-1792600478- Updated
- 2026-11-02
OSVCLSA-2026-1792600502 No score
TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.1.15-tuxcare.6.
- Record
CLSA-2026-1792600502- Updated
- 2026-11-02
OSVCLSA-2026-1792600685 No score
TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 4 org.springframework packages to address 5 CVEs. Fixed in 6.1.14-tuxcare.3.
- Record
CLSA-2026-1792600685- Updated
- 2026-11-02
OSVCLSA-2026-1792601217 No score
TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 6.1.7-tuxcare.8.
- Record
CLSA-2026-1792601217- Updated
- 2026-11-02
OSVRHLW-2026-8ef16ddaa2e22182 No score
Lightwell Security Advisory: spring-webflux 5.3.18.rhlw-00010
Red Hat Lightwell has released org.springframework:spring-webflux 5.3.18.rhlw-00010 with backported fixes for CVE-2024-38816, CVE-2024-38819, CVE-2026-22735, CVE-2026-22737, CVE-2026-22740, CVE-2026-22741, CVE-2026-22745, CVE-2026-41839, CVE-2026-41840, CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41847, CVE-2026-41853, and CVE-2026-47892.
CVE-2024-38816: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
Specifically, an application is vulnerable when both of the following are true:
- the web application uses RouterFunctions to serve static resources
- resource handling is explicitly configured with a FileSystemResource location
However, malicious requests are blocked and rejected when any of the following is true:
- the Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html is in use
- the application runs on Tomcat or Jetty
CVE-2024-38819: Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
This patched artifact is a drop-in replacement for org.springframework:spring-webflux 5.3.18 from Maven Central.
- Record
RHLW-2026-8ef16ddaa2e22182- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webfluxMaven |
7.0.0 to 7.0.7 | 7.0.8 |
org.springframework:spring-webfluxMaven |
6.2.0 to 6.2.18 | 6.2.19 |
org.springframework:spring-webfluxMaven |
6.1.0 to 6.1.21 | None known |
org.springframework:spring-webfluxMaven |
through 5.3.39 | None known |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 14 CVEs |
6.2.15 up to 6.2.15-tuxcare.3, plus listed versions 6.2.15-tuxcare.16.2.15-tuxcare.2 |
6.2.15-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
5.3.39 up to 5.3.39-tuxcare.18, plus listed versions 5.3.39-tuxcare.105.3.39-tuxcare.115.3.39-tuxcare.125.3.39-tuxcare.135.3.39-tuxcare.14 Show 11 moreShow less5.3.39-tuxcare.155.3.39-tuxcare.165.3.39-tuxcare.175.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.18 |
Show 148 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
5.3.39 up to 5.3.39-tuxcare.18, plus listed versions 5.3.39-tuxcare.105.3.39-tuxcare.115.3.39-tuxcare.125.3.39-tuxcare.135.3.39-tuxcare.14 Show 11 moreShow less5.3.39-tuxcare.155.3.39-tuxcare.165.3.39-tuxcare.175.3.39-tuxcare.75.3.39-tuxcare.85.3.39-tuxcare.95.3.39.tuxcare.15.3.39.tuxcare.35.3.39.tuxcare.45.3.39.tuxcare.55.3.39.tuxcare.6 |
5.3.39-tuxcare.18 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 9 CVEs |
6.2.13 up to 6.2.13-tuxcare.1 | 6.2.13-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 20 CVEs |
6.2.1 up to 6.2.1-tuxcare.4, plus listed versions 6.2.1-tuxcare.16.2.1-tuxcare.26.2.1-tuxcare.3 |
6.2.1-tuxcare.4 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 20 CVEs |
6.2.1 up to 6.2.1-tuxcare.4, plus listed versions 6.2.1-tuxcare.16.2.1-tuxcare.26.2.1-tuxcare.3 |
6.2.1-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 20 CVEs |
6.2.1 up to 6.2.1-tuxcare.4, plus listed versions 6.2.1-tuxcare.16.2.1-tuxcare.26.2.1-tuxcare.3 |
6.2.1-tuxcare.4 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 20 CVEs |
6.2.1 up to 6.2.1-tuxcare.4, plus listed versions 6.2.1-tuxcare.16.2.1-tuxcare.26.2.1-tuxcare.3 |
6.2.1-tuxcare.4 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 20 CVEs |
6.2.1 up to 6.2.1-tuxcare.4, plus listed versions 6.2.1-tuxcare.16.2.1-tuxcare.26.2.1-tuxcare.3 |
6.2.1-tuxcare.4 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 20 CVEs |
6.2.1 up to 6.2.1-tuxcare.4, plus listed versions 6.2.1-tuxcare.16.2.1-tuxcare.26.2.1-tuxcare.3 |
6.2.1-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 20 CVEs |
6.2.1 up to 6.2.1-tuxcare.4, plus listed versions 6.2.1-tuxcare.16.2.1-tuxcare.26.2.1-tuxcare.3 |
6.2.1-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 20 CVEs |
6.2.1 up to 6.2.1-tuxcare.4, plus listed versions 6.2.1-tuxcare.16.2.1-tuxcare.26.2.1-tuxcare.3 |
6.2.1-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven |
6.1.21 up to 6.1.21-tuxcare.13, plus listed versions 6.1.21-tuxcare.16.1.21-tuxcare.106.1.21-tuxcare.116.1.21-tuxcare.126.1.21-tuxcare.2 Show 7 moreShow less6.1.21-tuxcare.36.1.21-tuxcare.46.1.21-tuxcare.56.1.21-tuxcare.66.1.21-tuxcare.76.1.21-tuxcare.86.1.21-tuxcare.9 |
6.1.21-tuxcare.13 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 34 CVEs |
6.2.12 up to 6.2.12-tuxcare.1 | 6.2.12-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-contextTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 36 CVEs |
6.1.18 up to 6.1.18-tuxcare.1 | 6.1.18-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-context-supportTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 33 CVEs |
6.2.14 up to 6.2.14-tuxcare.1 | 6.2.14-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven |
6.1.20 up to 6.1.20-tuxcare.11, plus listed versions 6.1.20-tuxcare.16.1.20-tuxcare.106.1.20-tuxcare.26.1.20-tuxcare.36.1.20-tuxcare.4 Show 5 moreShow less6.1.20-tuxcare.56.1.20-tuxcare.66.1.20-tuxcare.76.1.20-tuxcare.86.1.20-tuxcare.9 |
6.1.20-tuxcare.11 |
org.springframework:spring-webfluxTuxCare:Maven |
6.1.19 up to 6.1.19-tuxcare.5, plus listed versions 6.1.19-tuxcare.16.1.19-tuxcare.26.1.19-tuxcare.36.1.19-tuxcare.4 |
6.1.19-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 3 CVEs |
5.3.33 up to 5.3.33-tuxcare.2, plus listed versions 5.3.33-tuxcare.1 |
5.3.33-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
5.3.33 up to 5.3.33-tuxcare.2, plus listed versions 5.3.33-tuxcare.1 |
5.3.33-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 3 CVEs |
5.3.33 up to 5.3.33-tuxcare.2, plus listed versions 5.3.33-tuxcare.1 |
5.3.33-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 10 CVEs |
6.0.23 up to 6.0.23-tuxcare.11, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.106.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 Show 5 moreShow less6.0.23-tuxcare.56.0.23-tuxcare.66.0.23-tuxcare.76.0.23-tuxcare.86.0.23-tuxcare.9 |
6.0.23-tuxcare.11 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 10 CVEs |
6.0.23 up to 6.0.23-tuxcare.11, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.106.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 Show 5 moreShow less6.0.23-tuxcare.56.0.23-tuxcare.66.0.23-tuxcare.76.0.23-tuxcare.86.0.23-tuxcare.9 |
6.0.23-tuxcare.11 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 10 CVEs |
6.0.23 up to 6.0.23-tuxcare.11, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.106.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 Show 5 moreShow less6.0.23-tuxcare.56.0.23-tuxcare.66.0.23-tuxcare.76.0.23-tuxcare.86.0.23-tuxcare.9 |
6.0.23-tuxcare.11 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 10 CVEs |
6.0.23 up to 6.0.23-tuxcare.11, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.106.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 Show 5 moreShow less6.0.23-tuxcare.56.0.23-tuxcare.66.0.23-tuxcare.76.0.23-tuxcare.86.0.23-tuxcare.9 |
6.0.23-tuxcare.11 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 10 CVEs |
6.0.23 up to 6.0.23-tuxcare.11, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.106.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 Show 5 moreShow less6.0.23-tuxcare.56.0.23-tuxcare.66.0.23-tuxcare.76.0.23-tuxcare.86.0.23-tuxcare.9 |
6.0.23-tuxcare.11 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 10 CVEs |
6.0.23 up to 6.0.23-tuxcare.11, plus listed versions 6.0.23-tuxcare.16.0.23-tuxcare.106.0.23-tuxcare.26.0.23-tuxcare.36.0.23-tuxcare.4 Show 5 moreShow less6.0.23-tuxcare.56.0.23-tuxcare.66.0.23-tuxcare.76.0.23-tuxcare.86.0.23-tuxcare.9 |
6.0.23-tuxcare.11 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 4 CVEs |
6.1.16 up to 6.1.16-tuxcare.7, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.26.1.16-tuxcare.36.1.16-tuxcare.46.1.16-tuxcare.56.1.16-tuxcare.6 |
6.1.16-tuxcare.7 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 4 CVEs |
6.1.16 up to 6.1.16-tuxcare.7, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.26.1.16-tuxcare.36.1.16-tuxcare.46.1.16-tuxcare.56.1.16-tuxcare.6 |
6.1.16-tuxcare.7 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 4 CVEs |
6.1.16 up to 6.1.16-tuxcare.7, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.26.1.16-tuxcare.36.1.16-tuxcare.46.1.16-tuxcare.56.1.16-tuxcare.6 |
6.1.16-tuxcare.7 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 4 CVEs |
6.1.16 up to 6.1.16-tuxcare.7, plus listed versions 6.1.16-tuxcare.16.1.16-tuxcare.26.1.16-tuxcare.36.1.16-tuxcare.46.1.16-tuxcare.56.1.16-tuxcare.6 |
6.1.16-tuxcare.7 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 6 CVEs |
6.0.16 up to 6.0.16-tuxcare.10, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.46.0.16-tuxcare.5 Show 4 moreShow less6.0.16-tuxcare.66.0.16-tuxcare.76.0.16-tuxcare.86.0.16-tuxcare.9 |
6.0.16-tuxcare.10 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 6 CVEs |
6.0.16 up to 6.0.16-tuxcare.10, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.46.0.16-tuxcare.5 Show 4 moreShow less6.0.16-tuxcare.66.0.16-tuxcare.76.0.16-tuxcare.86.0.16-tuxcare.9 |
6.0.16-tuxcare.10 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 6 CVEs |
6.0.16 up to 6.0.16-tuxcare.10, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.46.0.16-tuxcare.5 Show 4 moreShow less6.0.16-tuxcare.66.0.16-tuxcare.76.0.16-tuxcare.86.0.16-tuxcare.9 |
6.0.16-tuxcare.10 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 6 CVEs |
6.0.16 up to 6.0.16-tuxcare.10, plus listed versions 6.0.16-tuxcare.16.0.16-tuxcare.26.0.16-tuxcare.36.0.16-tuxcare.46.0.16-tuxcare.5 Show 4 moreShow less6.0.16-tuxcare.66.0.16-tuxcare.76.0.16-tuxcare.86.0.16-tuxcare.9 |
6.0.16-tuxcare.10 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 5 CVEs |
6.1.13 up to 6.1.13-tuxcare.4, plus listed versions 6.1.13-tuxcare.16.1.13-tuxcare.26.1.13-tuxcare.3 |
6.1.13-tuxcare.4 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
6.1.13 up to 6.1.13-tuxcare.4, plus listed versions 6.1.13-tuxcare.16.1.13-tuxcare.26.1.13-tuxcare.3 |
6.1.13-tuxcare.4 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
6.1.13 up to 6.1.13-tuxcare.4, plus listed versions 6.1.13-tuxcare.16.1.13-tuxcare.26.1.13-tuxcare.3 |
6.1.13-tuxcare.4 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
6.1.13 up to 6.1.13-tuxcare.4, plus listed versions 6.1.13-tuxcare.16.1.13-tuxcare.26.1.13-tuxcare.3 |
6.1.13-tuxcare.4 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
6.0.12 up to 6.0.12-tuxcare.6, plus listed versions 6.0.12-tuxcare.16.0.12-tuxcare.26.0.12-tuxcare.36.0.12-tuxcare.46.0.12-tuxcare.5 |
6.0.12-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
6.0.12 up to 6.0.12-tuxcare.6, plus listed versions 6.0.12-tuxcare.16.0.12-tuxcare.26.0.12-tuxcare.36.0.12-tuxcare.46.0.12-tuxcare.5 |
6.0.12-tuxcare.6 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
6.0.12 up to 6.0.12-tuxcare.6, plus listed versions 6.0.12-tuxcare.16.0.12-tuxcare.26.0.12-tuxcare.36.0.12-tuxcare.46.0.12-tuxcare.5 |
6.0.12-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
6.0.12 up to 6.0.12-tuxcare.6, plus listed versions 6.0.12-tuxcare.16.0.12-tuxcare.26.0.12-tuxcare.36.0.12-tuxcare.46.0.12-tuxcare.5 |
6.0.12-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
6.0.12 up to 6.0.12-tuxcare.6, plus listed versions 6.0.12-tuxcare.16.0.12-tuxcare.26.0.12-tuxcare.36.0.12-tuxcare.46.0.12-tuxcare.5 |
6.0.12-tuxcare.6 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
6.0.12 up to 6.0.12-tuxcare.6, plus listed versions 6.0.12-tuxcare.16.0.12-tuxcare.26.0.12-tuxcare.36.0.12-tuxcare.46.0.12-tuxcare.5 |
6.0.12-tuxcare.6 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
6.0.11 up to 6.0.11-tuxcare.6, plus listed versions 6.0.11-tuxcare.16.0.11-tuxcare.26.0.11-tuxcare.36.0.11-tuxcare.46.0.11-tuxcare.5 |
6.0.11-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
6.0.11 up to 6.0.11-tuxcare.6, plus listed versions 6.0.11-tuxcare.16.0.11-tuxcare.26.0.11-tuxcare.36.0.11-tuxcare.46.0.11-tuxcare.5 |
6.0.11-tuxcare.6 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
6.0.11 up to 6.0.11-tuxcare.6, plus listed versions 6.0.11-tuxcare.16.0.11-tuxcare.26.0.11-tuxcare.36.0.11-tuxcare.46.0.11-tuxcare.5 |
6.0.11-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
6.0.11 up to 6.0.11-tuxcare.6, plus listed versions 6.0.11-tuxcare.16.0.11-tuxcare.26.0.11-tuxcare.36.0.11-tuxcare.46.0.11-tuxcare.5 |
6.0.11-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
6.0.11 up to 6.0.11-tuxcare.6, plus listed versions 6.0.11-tuxcare.16.0.11-tuxcare.26.0.11-tuxcare.36.0.11-tuxcare.46.0.11-tuxcare.5 |
6.0.11-tuxcare.6 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
6.0.11 up to 6.0.11-tuxcare.6, plus listed versions 6.0.11-tuxcare.16.0.11-tuxcare.26.0.11-tuxcare.36.0.11-tuxcare.46.0.11-tuxcare.5 |
6.0.11-tuxcare.6 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 9 CVEs |
6.0.0 up to 6.0.0-tuxcare.5, plus listed versions 6.0.0-tuxcare.16.0.0-tuxcare.26.0.0-tuxcare.36.0.0-tuxcare.4 |
6.0.0-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 9 CVEs |
6.0.0 up to 6.0.0-tuxcare.5, plus listed versions 6.0.0-tuxcare.16.0.0-tuxcare.26.0.0-tuxcare.36.0.0-tuxcare.4 |
6.0.0-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 9 CVEs |
6.0.0 up to 6.0.0-tuxcare.5, plus listed versions 6.0.0-tuxcare.16.0.0-tuxcare.26.0.0-tuxcare.36.0.0-tuxcare.4 |
6.0.0-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 9 CVEs |
6.0.0 up to 6.0.0-tuxcare.5, plus listed versions 6.0.0-tuxcare.16.0.0-tuxcare.26.0.0-tuxcare.36.0.0-tuxcare.4 |
6.0.0-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 9 CVEs |
6.0.0 up to 6.0.0-tuxcare.5, plus listed versions 6.0.0-tuxcare.16.0.0-tuxcare.26.0.0-tuxcare.36.0.0-tuxcare.4 |
6.0.0-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 9 CVEs |
6.0.0 up to 6.0.0-tuxcare.5, plus listed versions 6.0.0-tuxcare.16.0.0-tuxcare.26.0.0-tuxcare.36.0.0-tuxcare.4 |
6.0.0-tuxcare.5 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
6.0.14 up to 6.0.14-tuxcare.2, plus listed versions 6.0.14-tuxcare.1 |
6.0.14-tuxcare.2 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
6.0.14 up to 6.0.14-tuxcare.2, plus listed versions 6.0.14-tuxcare.1 |
6.0.14-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
6.0.14 up to 6.0.14-tuxcare.2, plus listed versions 6.0.14-tuxcare.1 |
6.0.14-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
6.0.14 up to 6.0.14-tuxcare.2, plus listed versions 6.0.14-tuxcare.1 |
6.0.14-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
6.0.14 up to 6.0.14-tuxcare.2, plus listed versions 6.0.14-tuxcare.1 |
6.0.14-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
6.0.14 up to 6.0.14-tuxcare.2, plus listed versions 6.0.14-tuxcare.1 |
6.0.14-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-jmsTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-messagingTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 32 CVEs |
6.2.7 up to 6.2.7-tuxcare.1 | 6.2.7-tuxcare.1 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 8 CVEs |
6.0.13 up to 6.0.13-tuxcare.6, plus listed versions 6.0.13-tuxcare.16.0.13-tuxcare.26.0.13-tuxcare.36.0.13-tuxcare.46.0.13-tuxcare.5 |
6.0.13-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 8 CVEs |
6.0.13 up to 6.0.13-tuxcare.6, plus listed versions 6.0.13-tuxcare.16.0.13-tuxcare.26.0.13-tuxcare.36.0.13-tuxcare.46.0.13-tuxcare.5 |
6.0.13-tuxcare.6 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 8 CVEs |
6.0.13 up to 6.0.13-tuxcare.6, plus listed versions 6.0.13-tuxcare.16.0.13-tuxcare.26.0.13-tuxcare.36.0.13-tuxcare.46.0.13-tuxcare.5 |
6.0.13-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 8 CVEs |
6.0.13 up to 6.0.13-tuxcare.6, plus listed versions 6.0.13-tuxcare.16.0.13-tuxcare.26.0.13-tuxcare.36.0.13-tuxcare.46.0.13-tuxcare.5 |
6.0.13-tuxcare.6 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 8 CVEs |
6.0.13 up to 6.0.13-tuxcare.6, plus listed versions 6.0.13-tuxcare.16.0.13-tuxcare.26.0.13-tuxcare.36.0.13-tuxcare.46.0.13-tuxcare.5 |
6.0.13-tuxcare.6 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 8 CVEs |
6.0.13 up to 6.0.13-tuxcare.6, plus listed versions 6.0.13-tuxcare.16.0.13-tuxcare.26.0.13-tuxcare.36.0.13-tuxcare.46.0.13-tuxcare.5 |
6.0.13-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 7 CVEs |
5.3.32 up to 5.3.32-tuxcare.2, plus listed versions 5.3.32-tuxcare.1 |
5.3.32-tuxcare.2 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 7 CVEs |
5.3.32 up to 5.3.32-tuxcare.2, plus listed versions 5.3.32-tuxcare.1 |
5.3.32-tuxcare.2 |
org.springframework:spring-webTuxCare:Maven From an advisory covering 7 CVEs |
5.3.32 up to 5.3.32-tuxcare.2, plus listed versions 5.3.32-tuxcare.1 |
5.3.32-tuxcare.2 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
5.3.32 up to 5.3.32-tuxcare.2, plus listed versions 5.3.32-tuxcare.1 |
5.3.32-tuxcare.2 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
5.3.32 up to 5.3.32-tuxcare.2, plus listed versions 5.3.32-tuxcare.1 |
5.3.32-tuxcare.2 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 7 CVEs |
5.3.32 up to 5.3.32-tuxcare.2, plus listed versions 5.3.32-tuxcare.1 |
5.3.32-tuxcare.2 |
org.springframework:spring-beansTuxCare:Maven From an advisory covering 7 CVEs |
6.0.15 up to 6.0.15-tuxcare.5, plus listed versions 6.0.15-tuxcare.16.0.15-tuxcare.26.0.15-tuxcare.36.0.15-tuxcare.4 |
6.0.15-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 7 CVEs |
6.0.15 up to 6.0.15-tuxcare.5, plus listed versions 6.0.15-tuxcare.16.0.15-tuxcare.26.0.15-tuxcare.36.0.15-tuxcare.4 |
6.0.15-tuxcare.5 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 7 CVEs |
6.0.15 up to 6.0.15-tuxcare.5, plus listed versions 6.0.15-tuxcare.16.0.15-tuxcare.26.0.15-tuxcare.36.0.15-tuxcare.4 |
6.0.15-tuxcare.5 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 7 CVEs |
6.0.15 up to 6.0.15-tuxcare.5, plus listed versions 6.0.15-tuxcare.16.0.15-tuxcare.26.0.15-tuxcare.36.0.15-tuxcare.4 |
6.0.15-tuxcare.5 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 7 CVEs |
6.0.15 up to 6.0.15-tuxcare.5, plus listed versions 6.0.15-tuxcare.16.0.15-tuxcare.26.0.15-tuxcare.36.0.15-tuxcare.4 |
6.0.15-tuxcare.5 |
org.springframework:spring-websocketTuxCare:Maven From an advisory covering 7 CVEs |
6.0.15 up to 6.0.15-tuxcare.5, plus listed versions 6.0.15-tuxcare.16.0.15-tuxcare.26.0.15-tuxcare.36.0.15-tuxcare.4 |
6.0.15-tuxcare.5 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 3 CVEs |
6.1.4 up to 6.1.4-tuxcare.8, plus listed versions 6.1.4-tuxcare.16.1.4-tuxcare.26.1.4-tuxcare.36.1.4-tuxcare.46.1.4-tuxcare.56.1.4-tuxcare.66.1.4-tuxcare.7 |
6.1.4-tuxcare.8 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 3 CVEs |
6.1.4 up to 6.1.4-tuxcare.8, plus listed versions 6.1.4-tuxcare.16.1.4-tuxcare.26.1.4-tuxcare.36.1.4-tuxcare.46.1.4-tuxcare.56.1.4-tuxcare.66.1.4-tuxcare.7 |
6.1.4-tuxcare.8 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
6.1.4 up to 6.1.4-tuxcare.8, plus listed versions 6.1.4-tuxcare.16.1.4-tuxcare.26.1.4-tuxcare.36.1.4-tuxcare.46.1.4-tuxcare.56.1.4-tuxcare.66.1.4-tuxcare.7 |
6.1.4-tuxcare.8 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 2 CVEs |
6.1.15 up to 6.1.15-tuxcare.6, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.36.1.15-tuxcare.46.1.15-tuxcare.5 |
6.1.15-tuxcare.6 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 2 CVEs |
6.1.15 up to 6.1.15-tuxcare.6, plus listed versions 6.1.15-tuxcare.16.1.15-tuxcare.26.1.15-tuxcare.36.1.15-tuxcare.46.1.15-tuxcare.5 |
6.1.15-tuxcare.6 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 5 CVEs |
6.1.14 up to 6.1.14-tuxcare.3, plus listed versions 6.1.14-tuxcare.16.1.14-tuxcare.2 |
6.1.14-tuxcare.3 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 5 CVEs |
6.1.14 up to 6.1.14-tuxcare.3, plus listed versions 6.1.14-tuxcare.16.1.14-tuxcare.2 |
6.1.14-tuxcare.3 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 5 CVEs |
6.1.14 up to 6.1.14-tuxcare.3, plus listed versions 6.1.14-tuxcare.16.1.14-tuxcare.2 |
6.1.14-tuxcare.3 |
org.springframework:spring-webmvcTuxCare:Maven From an advisory covering 5 CVEs |
6.1.14 up to 6.1.14-tuxcare.3, plus listed versions 6.1.14-tuxcare.16.1.14-tuxcare.2 |
6.1.14-tuxcare.3 |
org.springframework:spring-coreTuxCare:Maven From an advisory covering 3 CVEs |
6.1.7 up to 6.1.7-tuxcare.8, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.26.1.7-tuxcare.36.1.7-tuxcare.46.1.7-tuxcare.56.1.7-tuxcare.66.1.7-tuxcare.7 |
6.1.7-tuxcare.8 |
org.springframework:spring-expressionTuxCare:Maven From an advisory covering 3 CVEs |
6.1.7 up to 6.1.7-tuxcare.8, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.26.1.7-tuxcare.36.1.7-tuxcare.46.1.7-tuxcare.56.1.7-tuxcare.66.1.7-tuxcare.7 |
6.1.7-tuxcare.8 |
org.springframework:spring-webfluxTuxCare:Maven From an advisory covering 3 CVEs |
6.1.7 up to 6.1.7-tuxcare.8, plus listed versions 6.1.7-tuxcare.16.1.7-tuxcare.26.1.7-tuxcare.36.1.7-tuxcare.46.1.7-tuxcare.56.1.7-tuxcare.66.1.7-tuxcare.7 |
6.1.7-tuxcare.8 |
libspring-javaDebian:12 |
All versions, plus listed versions 4.3.30-24.3.30-34.3.30-4 |
None known |
libspring-javaDebian:13 |
All versions, plus listed versions 4.3.30-34.3.30-4 |
None known |
libspring-javaDebian:14 |
All versions, plus listed versions 4.3.30-34.3.30-4 |
None known |
org.springframework:spring-webfluxMaven |
7.0.0 up to 7.0.8, plus listed versions 7.0.17.0.27.0.37.0.47.0.57.0.67.0.7 |
7.0.8 |
org.springframework:spring-webfluxMaven |
6.2.0 up to 6.2.19, plus listed versions 6.2.16.2.106.2.116.2.126.2.13 Show 13 moreShow less6.2.146.2.156.2.166.2.176.2.186.2.26.2.36.2.46.2.56.2.66.2.76.2.86.2.9 |
6.2.19 |
org.springframework:spring-webfluxMaven |
6.1.0 to 6.1.21, plus listed versions 6.1.16.1.106.1.116.1.126.1.13 Show 15 moreShow less6.1.146.1.156.1.166.1.176.1.186.1.196.1.26.1.206.1.36.1.46.1.56.1.66.1.76.1.86.1.9 |
None known |
org.springframework:spring-webfluxMaven |
through 5.3.39, plus listed versions 5.0.0.RELEASE5.0.1.RELEASE5.0.10.RELEASE5.0.11.RELEASE5.0.12.RELEASE Show 45 moreShow less5.0.13.RELEASE5.0.14.RELEASE5.0.15.RELEASE5.0.16.RELEASE5.0.17.RELEASE5.0.18.RELEASE5.0.19.RELEASE5.0.2.RELEASE5.0.20.RELEASE5.0.3.RELEASE5.0.4.RELEASE5.0.5.RELEASE5.0.6.RELEASE5.0.7.RELEASE5.0.8.RELEASE5.0.9.RELEASE5.1.0.RELEASE5.1.1.RELEASE5.1.10.RELEASE5.1.11.RELEASE5.1.12.RELEASE5.1.13.RELEASE5.1.14.RELEASE5.1.15.RELEASE5.1.16.RELEASE5.1.17.RELEASE5.1.18.RELEASE5.1.19.RELEASE5.1.2.RELEASE5.1.20.RELEASE5.1.3.RELEASE5.1.4.RELEASE5.1.5.RELEASE5.1.6.RELEASE5.1.7.RELEASE5.1.8.RELEASE5.1.9.RELEASE5.2.0.RELEASE5.2.1.RELEASE5.2.10.RELEASE5.2.11.RELEASE5.2.12.RELEASE5.2.13.RELEASE5.2.14.RELEASE5.2.15.RELEASE |
None known |
org.springframework:spring-webfluxRed Hat Lightwell:Maven From an advisory covering 16 CVEs |
before 5.3.18.rhlw-00010, plus listed versions 5.0.0.RELEASE5.0.1.RELEASE5.0.10.RELEASE5.0.11.RELEASE5.0.12.RELEASE Show 45 moreShow less5.0.13.RELEASE5.0.14.RELEASE5.0.15.RELEASE5.0.16.RELEASE5.0.17.RELEASE5.0.18.RELEASE5.0.19.RELEASE5.0.2.RELEASE5.0.20.RELEASE5.0.3.RELEASE5.0.4.RELEASE5.0.5.RELEASE5.0.6.RELEASE5.0.7.RELEASE5.0.8.RELEASE5.0.9.RELEASE5.1.0.RELEASE5.1.1.RELEASE5.1.10.RELEASE5.1.11.RELEASE5.1.12.RELEASE5.1.13.RELEASE5.1.14.RELEASE5.1.15.RELEASE5.1.16.RELEASE5.1.17.RELEASE5.1.18.RELEASE5.1.19.RELEASE5.1.2.RELEASE5.1.20.RELEASE5.1.3.RELEASE5.1.4.RELEASE5.1.5.RELEASE5.1.6.RELEASE5.1.7.RELEASE5.1.8.RELEASE5.1.9.RELEASE5.2.0.RELEASE5.2.1.RELEASE5.2.10.RELEASE5.2.11.RELEASE5.2.12.RELEASE5.2.13.RELEASE5.2.14.RELEASE5.2.15.RELEASE |
5.3.18.rhlw-00010 |
libspring-javaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.0.6.RELEASE-73.0.6.RELEASE-83.0.6.RELEASE-93.0.6.RELEASE-103.0.6.RELEASE-11 Show 4 moreShow less3.0.6.RELEASE-123.0.6.RELEASE-133.0.6.RELEASE-13ubuntu0.1~esm13.0.6.RELEASE-13ubuntu0.1~esm2 |
None known |
libspring-javaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.2.13-33.2.13-43.2.13-53.2.13-5ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.3.11-14.3.12-14.3.13-24.3.14-14.3.22-1~18.044.3.22-1~18.04.1~esm1 |
None known |
libspring-javaUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 4.3.22-44.3.22-4ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 4.3.30-14.3.30-1ubuntu0.1~esm1 |
None known |
libspring-javaUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.3.30-24.3.30-2ubuntu0.24.04.1~esm1 |
None known |
libspring-javaUbuntu:25.10 |
All versions, plus listed versions 4.3.30-2ubuntu14.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.10 |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
libspring-javaUbuntu:26.04:LTS |
All versions, plus listed versions 4.3.30-3ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, affected_more | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-41840 is a medium vulnerability (CVSS 5.9) in Spring Framework, published June 9, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 18th percentile. Fixed in org.springframework:spring-webflux 7.0.8.
References
spring.io/security/cve-2026-41840
nvd.nist.gov/vuln/detail/CVE-2026-41840
github.com/spring-projects/spring-framework/releases/tag/v6.2.19
security-tracker.debian.org/tracker/CVE-2026-41840
Show 22 moreShow less
ubuntu.com/security/CVE-2026-41840
cve.org/CVERecord?id=CVE-2026-41840
This page doesn't list everything
Left out here: 94 versions. The JSON record has them.