org.springframework:spring-websocket vulnerabilities (Maven)

2 vulnerabilities.

• org.springframework:spring-websocket Maven Spring Framework Predictable Session ID in WebSocket Module CVE-2026-41838 Fix available 4.8 MediumJune 9, 2026
• org.springframework:spring-websocket Maven Spring Framework STOMP CSRF Vulnerability CVE-2025-41254 Fix available 4.3 MediumOctober 16, 2025