org.springframework:spring-webflux vulnerabilities (Maven)
20 vulnerabilities.
-
org.springframework:spring-webfluxMaven Spring Framework Server Sent Event stream corruption while rendering fragments 9.8 Critical -
org.springframework:spring-webfluxMaven Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints 9.8 Critical -
org.springframework:spring-webfluxMaven Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux 5.3 Medium -
org.springframework:spring-webfluxMaven Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL 4.8 Medium -
org.springframework:spring-webfluxMaven Spring Framework Open Redirect in Spring MVC and WebFlux 4.2 Medium -
org.springframework:spring-webfluxMaven Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux 5.9 Medium -
org.springframework:spring-webfluxMaven Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux 7.5 High -
org.springframework:spring-webfluxMaven Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux 5.9 Medium -
org.springframework:spring-webfluxMaven Spring Framework Denial of Service via Multipart Requests in WebFlux 5.9 Medium -
org.springframework:spring-webfluxMaven Spring Framework Escalation via Session Fixation in WebFlux 4.2 Medium -
org.springframework:spring-webfluxMaven CVE-2026-22745 : Denial of service in static resource handling on Windows platforms 5.3 Medium -
org.springframework:spring-webfluxMaven Static resource cache poisoning in Spring MVC and WebFlux 3.1 Low -
org.springframework:spring-webfluxMaven Spring Framework DoS with Multipart Temp Files in WebFlux 6.5 Medium -
org.springframework:spring-webfluxMaven Spring Framework Improper Path Limitation with Script View Templates 5.9 Medium -
org.springframework:spring-webfluxMaven Server Sent Event stream corruption 2.6 Low -
org.springframework:spring-webfluxMaven Spring Framework Path Traversal vulnerability 7.5 High -
org.springframework:spring-webfluxMaven CVE-2024-38816: Path traversal vulnerability in functional web frameworks 7.5 High -
org.springframework:spring-webfluxMaven Remote Code Execution in Spring Framework 9.8 Critical -
org.springframework:spring-webfluxMaven CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux 5.3 Medium -
org.springframework:spring-webfluxMaven RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application 8.0 High