{"id":"CVE-2026-41003","aliases":["CLSA-2026-1783645390","CLSA-2026-1785291983","CLSA-2026-1785727931","CLSA-2026-1785965552","CLSA-2026-1786479067","CLSA-2026-1786628763","CLSA-2026-1787137094","CLSA-2026-1787145440","CLSA-2026-1787157249","CLSA-2026-1789676383","CLSA-2026-1790159292","CLSA-2026-1790957410","CLSA-2026-1791188726","CLSA-2026-1791380003","CLSA-2026-1791391633","CLSA-2026-1791392813","CLSA-2026-1792077066","CLSA-2026-1792079446","CLSA-2026-1792079757","CLSA-2026-1792084952","CLSA-2026-1792089227","CLSA-2026-1794175722","CLSA-2026-1794189026","CLSA-2026-1794189800","EUVD-2026-35887","GHSA-3pjj-qpw6-5fcm","GHSA-m69x-pw9p-7j3q","GHSA-ww38-37g9-m3q3","RHLW-2026-2cf5e53d95861e97","ROOT-APP-MAVEN-CVE-2026-41003"],"status":"published","title":"Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting","description":"An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00204,"percentile":0.10385,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2026-06-09T23:46:53Z","modified":"2026-11-09T07:15:04Z","fixes":[{"ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","fixed_in":["7.0.6","6.5.11"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","fixed_in":["6.4.3-tuxcare.7","6.3.10-tuxcare.13","5.7.11-tuxcare.6","6.2.7-tuxcare.6","6.2.2-tuxcare.7"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","fixed_in":["6.5.9-aikido.1","7.0.4-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.springframework.security:spring-security-saml2-service-provider","fixed_in":["6.5.9-root.io.1","7.0.4-root.io.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"last_affected":"7.0.5"},{"fixed":"7.0.6"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.0"},{"last_affected":"6.5.10"},{"fixed":"6.5.11"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.0"},{"last_affected":"6.4.16"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"last_affected":"6.3.16"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.0"},{"last_affected":"5.8.25"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.7.23"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.16"},{"fixed":"5.8.16-tuxcare.12"}]}],"versions":["5.8.16","5.8.16-tuxcare.10","5.8.16-tuxcare.11","5.8.16-tuxcare.4","5.8.16-tuxcare.5","5.8.16-tuxcare.6","5.8.16-tuxcare.7","5.8.16-tuxcare.8","5.8.16-tuxcare.9","5.8.16.tuxcare","5.8.16.tuxcare.1","5.8.16.tuxcare.2","5.8.16.tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.16"},{"fixed":"5.8.16-tuxcare.12"}]}],"versions":["5.8.16","5.8.16-tuxcare.10","5.8.16-tuxcare.11","5.8.16-tuxcare.4","5.8.16-tuxcare.5","5.8.16-tuxcare.6","5.8.16-tuxcare.7","5.8.16-tuxcare.8","5.8.16-tuxcare.9","5.8.16.tuxcare","5.8.16.tuxcare.1","5.8.16.tuxcare.2","5.8.16.tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.3"},{"fixed":"6.4.3-tuxcare.7"}]}],"versions":["6.4.3","6.4.3-tuxcare.1","6.4.3-tuxcare.2","6.4.3-tuxcare.3","6.4.3-tuxcare.4","6.4.3-tuxcare.5","6.4.3-tuxcare.6"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.12"},{"fixed":"5.7.12-tuxcare.6"}]}],"versions":["5.7.12","5.7.12-tuxcare.1","5.7.12-tuxcare.2","5.7.12-tuxcare.3","5.7.12-tuxcare.4","5.7.12-tuxcare.5"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.14"},{"fixed":"5.7.14-tuxcare.4"}]}],"versions":["5.7.14","5.7.14-tuxcare.1","5.7.14-tuxcare.2","5.7.14-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.14"},{"fixed":"5.7.14-tuxcare.4"}]}],"versions":["5.7.14","5.7.14-tuxcare.1","5.7.14-tuxcare.2","5.7.14-tuxcare.3"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.10"},{"fixed":"5.6.10-tuxcare.7"}]}],"versions":["5.6.10","5.6.10-tuxcare.1","5.6.10-tuxcare.2","5.6.10-tuxcare.3","5.6.10-tuxcare.4","5.6.10-tuxcare.5","5.6.10-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.10"},{"fixed":"5.6.10-tuxcare.7"}]}],"versions":["5.6.10","5.6.10-tuxcare.1","5.6.10-tuxcare.2","5.6.10-tuxcare.3","5.6.10-tuxcare.4","5.6.10-tuxcare.5","5.6.10-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.13"}]}],"versions":["6.3.10","6.3.10-tuxcare.1","6.3.10-tuxcare.10","6.3.10-tuxcare.11","6.3.10-tuxcare.12","6.3.10-tuxcare.2","6.3.10-tuxcare.3","6.3.10-tuxcare.4","6.3.10-tuxcare.5","6.3.10-tuxcare.6","6.3.10-tuxcare.7","6.3.10-tuxcare.8","6.3.10-tuxcare.9"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.11"},{"fixed":"5.7.11-tuxcare.6"}]}],"versions":["5.7.11","5.7.11-tuxcare.1","5.7.11-tuxcare.2","5.7.11-tuxcare.3","5.7.11-tuxcare.4","5.7.11-tuxcare.5","5.7.11.tuxcare"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.8"},{"fixed":"6.2.8-tuxcare.3"}]}],"versions":["6.2.8","6.2.8-tuxcare.1","6.2.8-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.8"},{"fixed":"6.2.8-tuxcare.3"}]}],"versions":["6.2.8","6.2.8-tuxcare.1","6.2.8-tuxcare.2"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.13"},{"fixed":"6.4.13-tuxcare.2"}]}],"versions":["6.4.13","6.4.13-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-oauth2-jose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.13"},{"fixed":"6.4.13-tuxcare.2"}]}],"versions":["6.4.13","6.4.13-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.13"},{"fixed":"6.4.13-tuxcare.2"}]}],"versions":["6.4.13","6.4.13-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.13"},{"fixed":"6.4.13-tuxcare.2"}]}],"versions":["6.4.13","6.4.13-tuxcare.1"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.14"},{"fixed":"5.8.14-tuxcare.1"}]}],"versions":["5.8.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.14"},{"fixed":"5.8.14-tuxcare.1"}]}],"versions":["5.8.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.14"},{"fixed":"5.8.14-tuxcare.1"}]}],"versions":["5.8.14"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.9"},{"fixed":"6.3.9-tuxcare.1"}]}],"versions":["6.3.9"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-oauth2-jose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.9"},{"fixed":"6.3.9-tuxcare.1"}]}],"versions":["6.3.9"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.9"},{"fixed":"6.3.9-tuxcare.1"}]}],"versions":["6.3.9"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.9"},{"fixed":"6.3.9-tuxcare.1"}]}],"versions":["6.3.9"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.7"},{"fixed":"6.2.7-tuxcare.6"}]}],"versions":["6.2.7","6.2.7-tuxcare.1","6.2.7-tuxcare.2","6.2.7-tuxcare.3","6.2.7-tuxcare.4","6.2.7-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.2"},{"fixed":"6.2.2-tuxcare.7"}]}],"versions":["6.2.2","6.2.2-tuxcare.1","6.2.2-tuxcare.2","6.2.2-tuxcare.3","6.2.2-tuxcare.4","6.2.2-tuxcare.5","6.2.2-tuxcare.6"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.7"},{"fixed":"5.7.7-tuxcare.1"}]}],"versions":["5.7.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.7"},{"fixed":"5.7.7-tuxcare.1"}]}],"versions":["5.7.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.7"},{"fixed":"5.7.7-tuxcare.1"}]}],"versions":["5.7.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.7"},{"fixed":"5.7.7-tuxcare.1"}]}],"versions":["5.7.7"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.8"},{"fixed":"5.5.8-tuxcare.1"}]}],"versions":["5.5.8"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.8"},{"fixed":"5.5.8-tuxcare.1"}]}],"versions":["5.5.8"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.8"},{"fixed":"5.5.8-tuxcare.1"}]}],"versions":["5.5.8"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.8"},{"fixed":"5.5.8-tuxcare.1"}]}],"versions":["5.5.8"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.9"},{"fixed":"5.6.9-tuxcare.1"}]}],"versions":["5.6.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.9"},{"fixed":"5.6.9-tuxcare.1"}]}],"versions":["5.6.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.9"},{"fixed":"5.6.9-tuxcare.1"}]}],"versions":["5.6.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.9"},{"fixed":"5.6.9-tuxcare.1"}]}],"versions":["5.6.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.8"},{"fixed":"6.0.8-tuxcare.4"}]}],"versions":["6.0.8","6.0.8-tuxcare.1","6.0.8-tuxcare.2","6.0.8-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.8"},{"fixed":"6.0.8-tuxcare.4"}]}],"versions":["6.0.8","6.0.8-tuxcare.1","6.0.8-tuxcare.2","6.0.8-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.8"},{"fixed":"6.0.8-tuxcare.4"}]}],"versions":["6.0.8","6.0.8-tuxcare.1","6.0.8-tuxcare.2","6.0.8-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.8"},{"fixed":"6.0.8-tuxcare.4"}]}],"versions":["6.0.8","6.0.8-tuxcare.1","6.0.8-tuxcare.2","6.0.8-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.8"},{"fixed":"6.0.8-tuxcare.4"}]}],"versions":["6.0.8","6.0.8-tuxcare.1","6.0.8-tuxcare.2","6.0.8-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.7"},{"fixed":"6.0.7-tuxcare.1"}]}],"versions":["6.0.7"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.7"},{"fixed":"6.0.7-tuxcare.1"}]}],"versions":["6.0.7"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.7"},{"fixed":"6.0.7-tuxcare.1"}]}],"versions":["6.0.7"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.7"},{"fixed":"6.0.7-tuxcare.1"}]}],"versions":["6.0.7"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.7"},{"fixed":"6.0.7-tuxcare.1"}]}],"versions":["6.0.7"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.6"},{"fixed":"6.1.6-tuxcare.8"}]}],"versions":["6.1.6","6.1.6-tuxcare.1","6.1.6-tuxcare.2","6.1.6-tuxcare.3","6.1.6-tuxcare.4","6.1.6-tuxcare.5","6.1.6-tuxcare.6","6.1.6-tuxcare.7"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.6"},{"fixed":"6.1.6-tuxcare.8"}]}],"versions":["6.1.6","6.1.6-tuxcare.1","6.1.6-tuxcare.2","6.1.6-tuxcare.3","6.1.6-tuxcare.4","6.1.6-tuxcare.5","6.1.6-tuxcare.6","6.1.6-tuxcare.7"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.6"},{"fixed":"6.1.6-tuxcare.8"}]}],"versions":["6.1.6","6.1.6-tuxcare.1","6.1.6-tuxcare.2","6.1.6-tuxcare.3","6.1.6-tuxcare.4","6.1.6-tuxcare.5","6.1.6-tuxcare.6","6.1.6-tuxcare.7"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.6"},{"fixed":"6.1.6-tuxcare.8"}]}],"versions":["6.1.6","6.1.6-tuxcare.1","6.1.6-tuxcare.2","6.1.6-tuxcare.3","6.1.6-tuxcare.4","6.1.6-tuxcare.5","6.1.6-tuxcare.6","6.1.6-tuxcare.7"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.6"},{"fixed":"6.1.6-tuxcare.8"}]}],"versions":["6.1.6","6.1.6-tuxcare.1","6.1.6-tuxcare.2","6.1.6-tuxcare.3","6.1.6-tuxcare.4","6.1.6-tuxcare.5","6.1.6-tuxcare.6","6.1.6-tuxcare.7"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.15"},{"fixed":"5.8.15-tuxcare.2"}]}],"versions":["5.8.15","5.8.15.tuxcare","5.8.15.tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.15"},{"fixed":"5.8.15-tuxcare.2"}]}],"versions":["5.8.15","5.8.15.tuxcare","5.8.15.tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.15"},{"fixed":"5.8.15-tuxcare.2"}]}],"versions":["5.8.15","5.8.15.tuxcare","5.8.15.tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.15"},{"fixed":"5.8.15-tuxcare.2"}]}],"versions":["5.8.15","5.8.15.tuxcare","5.8.15.tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.15"},{"fixed":"5.8.15-tuxcare.2"}]}],"versions":["5.8.15","5.8.15.tuxcare","5.8.15.tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.7"},{"fixed":"5.6.7-tuxcare.1"}]}],"versions":["5.6.7"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.7"},{"fixed":"5.6.7-tuxcare.1"}]}],"versions":["5.6.7"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.7"},{"fixed":"5.6.7-tuxcare.1"}]}],"versions":["5.6.7"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.7"},{"fixed":"5.6.7-tuxcare.1"}]}],"versions":["5.6.7"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.7"},{"fixed":"5.6.7-tuxcare.1"}]}],"versions":["5.6.7"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-oauth2-jose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.0.6"}]}],"versions":["7.0.0","7.0.1","7.0.2","7.0.3","7.0.4","7.0.5"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.0"},{"fixed":"6.5.11"}]}],"versions":["6.5.0","6.5.1","6.5.10","6.5.2","6.5.3","6.5.4","6.5.5","6.5.6","6.5.7","6.5.8","6.5.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.0"},{"last_affected":"6.4.16"}]}],"versions":["6.4.0","6.4.1","6.4.10","6.4.11","6.4.12","6.4.13","6.4.2","6.4.3","6.4.4","6.4.5","6.4.6","6.4.7","6.4.8","6.4.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.0"},{"last_affected":"6.3.16"}]}],"versions":["6.3.0","6.3.1","6.3.10","6.3.2","6.3.3","6.3.4","6.3.5","6.3.6","6.3.7","6.3.8","6.3.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.8.0"},{"last_affected":"5.8.25"}]}],"versions":["5.8.0","5.8.1","5.8.10","5.8.11","5.8.12","5.8.13","5.8.14","5.8.15","5.8.16","5.8.2","5.8.3","5.8.4","5.8.5","5.8.6","5.8.7","5.8.8","5.8.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.7.23"}]}],"versions":["5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.2.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0.RELEASE","5.3.1.RELEASE","5.3.10.RELEASE","5.3.11.RELEASE","5.3.12.RELEASE","5.3.13.RELEASE","5.3.2.RELEASE","5.3.3.RELEASE","5.3.4.RELEASE","5.3.5.RELEASE","5.3.6.RELEASE","5.3.7.RELEASE","5.3.8.RELEASE","5.3.9.RELEASE","5.4.0","5.4.1","5.4.10","5.4.11","5.4.2","5.4.3","5.4.4","5.4.5","5.4.6","5.4.7","5.4.8","5.4.9","5.5.0","5.5.1","5.5.2","5.5.3","5.5.4","5.5.5","5.5.6","5.5.7","5.5.8","5.6.0","5.6.1","5.6.10","5.6.11","5.6.12","5.6.2","5.6.3","5.6.4","5.6.5","5.6.6","5.6.7","5.6.8","5.6.9","5.7.0","5.7.1","5.7.10","5.7.11","5.7.12","5.7.13","5.7.14","5.7.2","5.7.3","5.7.4","5.7.5","5.7.6","5.7.7","5.7.8","5.7.9"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7.11.rhlw-00006"}]}],"versions":["5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.2.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0.RELEASE","5.3.1.RELEASE","5.3.10.RELEASE","5.3.11.RELEASE","5.3.12.RELEASE","5.3.13.RELEASE","5.3.2.RELEASE","5.3.3.RELEASE","5.3.4.RELEASE","5.3.5.RELEASE","5.3.6.RELEASE","5.3.7.RELEASE","5.3.8.RELEASE","5.3.9.RELEASE","5.4.0","5.4.1","5.4.10","5.4.11","5.4.2","5.4.3","5.4.4","5.4.5","5.4.6","5.4.7","5.4.8","5.4.9","5.5.0","5.5.1","5.5.2","5.5.3","5.5.4","5.5.5","5.5.6","5.5.7","5.5.8","5.6.0","5.6.1","5.6.10","5.6.11","5.6.12","5.6.2","5.6.3","5.6.4","5.6.5","5.6.6","5.6.7","5.6.8","5.6.9","5.7.0","5.7.1","5.7.10","5.7.11","5.7.2","5.7.3","5.7.4","5.7.5","5.7.6","5.7.7","5.7.8","5.7.9"],"bundled":3},{"source":"osv","ecosystem":"Root:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.9-aikido.1"},{"fixed":"7.0.4-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.9-root.io.1"},{"fixed":"7.0.4-root.io.1"}]}]}],"products":[{"vendor":"spring","product":"spring security"},{"vendor":"vmware","product":"spring_security"}],"references":[{"url":"https://spring.io/security/cve-2026-41003","tags":["Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41003","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-security/releases/tag/6.5.11","tags":["web"]},{"url":"https://github.com/spring-projects/spring-security/releases/tag/7.0.6","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3pjj-qpw6-5fcm","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41003.json","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-security","tags":["package"]},{"url":"https://spring.io/security/cve-2026-40988","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40988.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40988","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m69x-pw9p-7j3q","tags":["advisory"]},{"url":"https://spring.io/security/cve-2026-41694","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41694.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41694","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ww38-37g9-m3q3","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-41003","title":"Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting","description":"An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","status":"published","published":"2026-06-09T23:46:53.683Z","modified":"2026-06-27T21:24:40.807Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T13:41:08.498858Z"}],"euvd":[{"id":"EUVD-2026-35887","description":"An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","status":"published","published":"2026-06-09T23:46:53Z","modified":"2026-06-27T21:24:40Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-02T18:20:23.349194Z"}],"ghsa":[{"id":"GHSA-3pjj-qpw6-5fcm","title":"Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters","description":"An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","status":"published","published":"2026-06-10T00:31:51Z","modified":"2026-08-12T17:04:12Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:40:58.888637Z"}],"nvd":[{"id":"CVE-2026-41003","description":"An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","status":"published","published":"2026-06-10T00:16:50.307Z","modified":"2026-07-23T09:10:00.113Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:12:23.485267Z"}],"osv":[{"id":"CVE-2026-41003","title":"Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting","description":"An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","status":"published","published":"2026-06-09T23:46:53.683Z","modified":"2026-10-28T02:30:53.555613823Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:45:03.424067Z"},{"id":"GHSA-3pjj-qpw6-5fcm","title":"Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters","description":"An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.\n\nAffected versions:\nSpring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.","status":"published","published":"2026-06-10T00:31:51Z","modified":"2026-08-12T17:26:04.401679Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:36.092962Z"},{"id":"RHLW-2026-2cf5e53d95861e97","title":"Lightwell Security Advisory: spring-security-saml2-service-provider 5.7.11.rhlw-00006","description":"Red Hat Lightwell has released org.springframework.security:spring-security-saml2-service-provider 5.7.11.rhlw-00006 with backported fixes for CVE-2026-40988, CVE-2026-41003, and CVE-2026-41694.\n\nCVE-2026-40988: Unbounded DEFLATE Inflation in SAML 2.0 Service Provider\n\nCVE-2026-41003: Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting\n\nCVE-2026-41694: SAML Payloads Decrypted Without Valid Signature\n\nThis patched artifact is a drop-in replacement for org.springframework.security:spring-security-saml2-service-provider 5.7.11 from Maven Central.","status":"published","published":"2026-10-12T16:59:41Z","modified":"2026-10-27T04:13:02.426214646Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"CLSA-2026-1783645390","title":"TuxCare security update for org.springframework.security (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 2 CVEs. Fixed in 5.8.16-tuxcare.12.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-11-02T19:45:40.918509281Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1785291983","title":"TuxCare security update for org.springframework.security:spring-security-saml2-service-provider (1 CVE)","description":"TuxCare rebuilt org.springframework.security:spring-security-saml2-service-provider to address 1 CVE. Fixed in 6.4.3-tuxcare.7.","status":"published","published":"2026-08-04T14:52:50Z","modified":"2026-10-30T07:30:28.933446351Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1785727931","title":"TuxCare security update for org.springframework.security:spring-security-saml2-service-provider (3 CVEs)","description":"TuxCare rebuilt org.springframework.security:spring-security-saml2-service-provider to address 3 CVEs. Fixed in 5.7.12-tuxcare.6.","status":"published","published":"2026-08-04T14:52:51Z","modified":"2026-10-30T07:30:16.141201726Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1785965552","title":"TuxCare security update for org.springframework.security (4 CVEs)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 4 CVEs. Fixed in 5.7.14-tuxcare.4.","status":"published","published":"2026-08-05T21:32:32Z","modified":"2026-11-02T19:45:50.524035936Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786479067","title":"TuxCare security update for org.springframework.security (4 CVEs)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 4 CVEs. Fixed in 5.6.10-tuxcare.7.","status":"published","published":"2026-08-11T20:11:07Z","modified":"2026-11-02T19:45:53.471658601Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786628763","title":"TuxCare security update for org.springframework.security:spring-security-saml2-service-provider (1 CVE)","description":"TuxCare rebuilt org.springframework.security:spring-security-saml2-service-provider to address 1 CVE. Fixed in 6.3.10-tuxcare.13.","status":"published","published":"2026-08-13T13:46:03Z","modified":"2026-10-30T07:30:18.279247932Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787137094","title":"TuxCare security update for org.springframework.security:spring-security-saml2-service-provider (1 CVE)","description":"TuxCare rebuilt org.springframework.security:spring-security-saml2-service-provider to address 1 CVE. Fixed in 5.7.11-tuxcare.6.","status":"published","published":"2026-08-19T10:58:14Z","modified":"2026-10-30T07:30:13.625495697Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787145440","title":"TuxCare security update for org.springframework.security (4 CVEs)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 4 CVEs. Fixed in 6.2.8-tuxcare.3.","status":"published","published":"2026-08-19T13:17:20Z","modified":"2026-11-02T19:45:52.426800417Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1787157249","title":"TuxCare security update for org.springframework.security (6 CVEs)","description":"TuxCare rebuilt 4 org.springframework.security packages to address 6 CVEs. Fixed in 6.4.13-tuxcare.2.","status":"published","published":"2026-08-19T16:34:09Z","modified":"2026-11-02T19:45:56.682102632Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1789676383","title":"TuxCare security update for org.springframework.security (8 CVEs)","description":"TuxCare rebuilt 3 org.springframework.security packages to address 8 CVEs. Fixed in 5.8.14-tuxcare.1.","status":"published","published":"2026-09-17T20:19:43Z","modified":"2026-11-02T19:46:18.924712631Z","updated_at":"2026-11-02T20:29:28.838259Z"},{"id":"CLSA-2026-1790159292","title":"TuxCare security update for org.springframework.security (9 CVEs)","description":"TuxCare rebuilt 4 org.springframework.security packages to address 9 CVEs. Fixed in 6.3.9-tuxcare.1.","status":"published","published":"2026-09-23T10:28:12Z","modified":"2026-11-02T19:46:21.768639219Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790957410","title":"TuxCare security update for org.springframework.security:spring-security-saml2-service-provider (1 CVE)","description":"TuxCare rebuilt org.springframework.security:spring-security-saml2-service-provider to address 1 CVE. Fixed in 6.2.7-tuxcare.6.","status":"published","published":"2026-10-02T16:10:10Z","modified":"2026-10-30T07:30:44.186461016Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791188726","title":"TuxCare security update for org.springframework.security:spring-security-saml2-service-provider (1 CVE)","description":"TuxCare rebuilt org.springframework.security:spring-security-saml2-service-provider to address 1 CVE. Fixed in 6.2.2-tuxcare.7.","status":"published","published":"2026-10-05T08:25:26Z","modified":"2026-10-30T13:30:05.943838984Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791380003","title":"TuxCare security update for org.springframework.security (11 CVEs)","description":"TuxCare rebuilt 4 org.springframework.security packages to address 11 CVEs. Fixed in 5.7.7-tuxcare.1.","status":"published","published":"2026-10-07T13:33:23Z","modified":"2026-11-02T19:46:26.299873Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1791391633","title":"TuxCare security update for org.springframework.security (11 CVEs)","description":"TuxCare rebuilt 4 org.springframework.security packages to address 11 CVEs. Fixed in 5.5.8-tuxcare.1.","status":"published","published":"2026-10-07T16:47:13Z","modified":"2026-11-02T19:46:26.240190656Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1791392813","title":"TuxCare security update for org.springframework.security (10 CVEs)","description":"TuxCare rebuilt 4 org.springframework.security packages to address 10 CVEs. Fixed in 5.6.9-tuxcare.1.","status":"published","published":"2026-10-07T17:06:53Z","modified":"2026-11-02T19:46:26.260252028Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1792077066","title":"TuxCare security update for org.springframework.security (8 CVEs)","description":"TuxCare rebuilt 5 org.springframework.security packages to address 8 CVEs. Fixed in 6.0.8-tuxcare.4.","status":"published","published":"2026-10-15T15:11:06Z","modified":"2026-11-02T19:46:28.9424175Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792079446","title":"TuxCare security update for org.springframework.security (15 CVEs)","description":"TuxCare rebuilt 5 org.springframework.security packages to address 15 CVEs. Fixed in 6.0.7-tuxcare.1.","status":"published","published":"2026-10-15T15:50:46Z","modified":"2026-11-02T19:46:28.625713718Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792079757","title":"TuxCare security update for org.springframework.security (6 CVEs)","description":"TuxCare rebuilt 5 org.springframework.security packages to address 6 CVEs. Fixed in 6.1.6-tuxcare.8.","status":"published","published":"2026-10-15T15:55:57Z","modified":"2026-11-02T19:46:28.788534029Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792084952","title":"TuxCare security update for org.springframework.security (11 CVEs)","description":"TuxCare rebuilt 5 org.springframework.security packages to address 11 CVEs. Fixed in 5.8.15-tuxcare.2.","status":"published","published":"2026-10-15T17:22:32Z","modified":"2026-11-02T19:46:29.285657098Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792089227","title":"TuxCare security update for org.springframework.security (10 CVEs)","description":"TuxCare rebuilt 5 org.springframework.security packages to address 10 CVEs. Fixed in 5.6.7-tuxcare.1.","status":"published","published":"2026-10-15T18:33:47Z","modified":"2026-11-02T19:46:29.416522144Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1794175722","title":"TuxCare security update for org.springframework.security (14 CVEs)","description":"TuxCare rebuilt 6 org.springframework.security packages to address 14 CVEs. Fixed in 5.6.5-tuxcare.2.","status":"published","published":"2026-11-08T23:08:43Z","modified":"2026-11-09T01:45:02.285308078Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CLSA-2026-1794189026","title":"TuxCare security update for org.springframework.security (14 CVEs)","description":"TuxCare rebuilt 6 org.springframework.security packages to address 14 CVEs. Fixed in 5.7.6-tuxcare.2.","status":"published","published":"2026-11-09T02:50:27Z","modified":"2026-11-09T07:15:04.238231713Z","updated_at":"2026-11-09T07:20:29.20536Z"},{"id":"CLSA-2026-1794189800","title":"TuxCare security update for org.springframework.security (14 CVEs)","description":"TuxCare rebuilt 7 org.springframework.security packages to address 14 CVEs. Fixed in 6.1.5-tuxcare.3.","status":"published","published":"2026-11-09T03:03:20Z","modified":"2026-11-09T07:15:04.228555714Z","updated_at":"2026-11-09T07:20:29.20536Z"},{"id":"ROOT-APP-MAVEN-CVE-2026-41003","title":"CVE-2026-41003 in org.springframework.security:spring-security-saml2-service-provider - Patched by Root","description":"Root has patched CVE-2026-41003 in the org.springframework.security:spring-security-saml2-service-provider package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-09-16T07:13:11Z","modified":"2026-09-16T08:15:04.287608743Z","updated_at":"2026-11-02T15:53:27.066589Z"}]}}