org.springframework.security:spring-security-config vulnerabilities (TuxCare)
5 vulnerabilities.
-
org.springframework.security:spring-security-configTuxCare Under Some Conditions Spring Security HTTP Headers Are not Written 9.1 Critical -
org.springframework.security:spring-security-configTuxCare Spring Security - BCrypt Password Encoder maximum password length breaks timing attack mitigation 5.3 Medium -
org.springframework.security:spring-security-configTuxCare CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types 7.5 High -
org.springframework.security:spring-security-configTuxCare Spring Security Vulnerable to Authorization Bypass via Security Annotations 5.3 Medium -
org.springframework.security:spring-security-configTuxCare CVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password length 7.4 High