org.springframework:spring-websocket vulnerabilities (Red Hat Lightwell)

2 vulnerabilities.

• org.springframework:spring-websocket Red Hat Lightwell Spring Framework Predictable Session ID in WebSocket Module CVE-2026-41838 Fix available 4.8 MediumJune 9, 2026
• org.springframework:spring-websocket Red Hat Lightwell Spring Framework STOMP CSRF Vulnerability CVE-2025-41254 Fix available 4.3 MediumOctober 16, 2025