org.springframework.ws:spring-ws-security vulnerabilities (Root)

1 vulnerability.

• org.springframework.ws:spring-ws-security Root Wss4jSecurityInterceptor disables WS-I BSP validation by default CVE-2026-40994 Fix available 8.2 HighJune 11, 2026