org.springframework.security:spring-security-config vulnerabilities (Root)

2 vulnerabilities.

• org.springframework.security:spring-security-config Root ervlet Path Not Correctly Included in Path Matching of XML Authorization Rules CVE-2026-22754 Fix available 7.5 HighApril 22, 2026
• org.springframework.security:spring-security-config Root Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchers CVE-2026-22753 Fix available 7.5 HighApril 22, 2026