Skip to content
Spring vulnerabilities
Newest
-
spring integration, vmware spring integration +1 more
fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
CVE-2026-59324
Fix available
8.2 High
-
spring integration, vmware spring integration +1 more
EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
CVE-2026-59322
Fix available
6.3 Medium
-
spring integration, vmware spring integration +1 more
Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check
CVE-2026-59321
Fix available
4.2 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
In Spring AMQP the link credit never replenished on listener exception path
CVE-2026-59320
6.5 Medium
-
spring ai, vmware spring ai +1 more
RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure
CVE-2026-59319
4.3 Medium
-
spring for apache kafka, vmware spring for apache kafka +1 more
In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
CVE-2026-59317
Fix available
6.5 Medium
-
broadcom spring authorization server, spring authorization server +1 more
Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
CVE-2026-59316
8.2 High
-
spring cloud config, vmware spring cloud config +1 more
Spring Cloud Config Monitor Denial of Service
CVE-2026-59315
5.3 Medium
-
spring framework, vmware spring framework +1 more
Spring Framework response splitting in ContentDisposition
CVE-2026-59314
Fix available
3.7 Low
-
spring integration, vmware spring integration +1 more
Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creation
CVE-2026-59311
Fix available
6.8 Medium
-
spring cloud stream, vmware spring cloud stream +1 more
Potential for deserialization of untrusted types in Spring Cloud Stream
CVE-2026-59306
Fix available
3.1 Low
-
spring framework, vmware spring framework +1 more
Server Sent Event stream corruption in Spring MVC functional web framework
CVE-2026-59313
Fix available
9.8 Critical
-
spring integration, vmware spring integration +1 more
Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference
CVE-2026-59307
Fix available
8.0 High
-
spring cloud stream, vmware spring cloud stream +1 more
Partition interceptor may be improperly added while sending message
CVE-2026-59305
Fix available
3.1 Low
-
spring cloud stream, vmware spring cloud stream +1 more
Improper caching of the original content type in Spring Cloud Stream Avro
CVE-2026-59304
3.1 Low
-
spring cloud stream, vmware spring cloud stream +1 more
Dynamic destination cache size is not properly bound in Spring Cloud Stream
CVE-2026-59303
Fix available
3.1 Low
-
spring cloud stream, vmware spring cloud function +1 more
Potential for logging sensitive data in Spring Cloud Stream
CVE-2026-59302
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Potential for logging sensitive data in Spring Cloud Function Azure
CVE-2026-59301
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Potential for logging sensitive data in Spring Cloud Function AWS
CVE-2026-59300
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Composition lookup can potentially poison base function in Spring Cloud Function
CVE-2026-59299
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Potential for improper filtering of HTTP headers in Spring Cloud Function
CVE-2026-59298
Fix available
3.1 Low
-
spring cloud function, vmware spring cloud function +1 more
Spring Cloud Function can incorrectly determine if URI is secure
CVE-2026-59297
3.1 Low
-
spring ai, vmware spring ai +1 more
Arbitrary File Write via Path Traversal in ResourceCacheService
CVE-2026-59294
Fix available
5.9 Medium
-
spring integration, vmware spring integration +1 more
SMB minimum protocol dialect defaults to SMB1
CVE-2026-59293
Fix available
6.6 Medium
-
spring integration, vmware spring integration +1 more
World-readable metadata file in PropertiesPersistingMetadataStore (insecure temp-file permissions)
CVE-2026-59292
Fix available
3.2 Low
-
spring cloud function, vmware spring cloud function +1 more
Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function
CVE-2026-59291
Fix available
2.0 Low
-
spring for graphql, vmware spring for graphql +1 more
Spring for GraphQL WebSocket Client Denial of Service
CVE-2026-59287
Fix available
5.9 Medium
-
spring for graphql, vmware spring for graphql +1 more
Spring for GraphQL Unsafe Deserialization in pagination support
CVE-2026-59285
8.1 High
-
broadcom spring cloud commons, spring cloud commons +1 more
Spring Cloud Commons no allow list for writable env actuator endpoint
CVE-2026-59284
Fix available
6.6 Medium
-
spring framework, vmware spring framework +1 more
Spring Framework Safety Guard Bypass via SpEL Expression Compilation
CVE-2026-59283
Fix available
9.1 Critical
-
spring framework, vmware spring framework +1 more
Spring Framework Denial of Service via Unbounded List Growth in Data Binding
CVE-2026-59282
Fix available
7.5 High
-
spring security, vmware spring security +1 more
Spring Security InetAddressMatchers Incomplete Internal Network Classification
CVE-2026-59277
3.7 Low
-
spring security, vmware spring security +1 more
Timing Attack via Non-Constant-Time Comparison of Sensitive Values
CVE-2026-59276
Fix available
5.9 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Log4j2 AmqpAppender disables TLS hostname verification by default
CVE-2026-59272
Fix available
6.8 Medium
-
broadcom spring authorization server, spring authorization server +1 more
Spring Authorization Server: Open Redirect via request_uri parameter
CVE-2026-59355
6.1 Medium
-
spring framework, vmware spring framework +1 more
Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder
CVE-2026-47891
Fix available
9.8 Critical
-
spring framework, vmware spring framework +1 more
Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse
CVE-2026-47889
Fix available
7.5 High
-
spring framework, vmware spring framework +1 more
Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler
CVE-2026-47888
Fix available
7.5 High
-
spring framework, vmware spring framework +1 more
Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions
CVE-2026-47886
Fix available
7.5 High
-
spring framework, vmware spring framework +1 more
Spring Framework maxPartSize Ignored in PartEventHttpMessageReader
CVE-2026-47885
Fix available
7.5 High
-
spring framework, vmware spring framework +1 more
Spring Framework Improper Path Limitation in XsltView
CVE-2026-47884
Public exploitFix available
9.8 Critical
-
spring framework, vmware spring framework +1 more
Spring Framework Open Redirect in UrlHandlerFilter
CVE-2026-47883
Public exploitFix available
6.1 Medium
-
spring for apache kafka, vmware spring for apache kafka +1 more
In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages
CVE-2026-59278
Fix available
6.5 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)
CVE-2026-59275
Fix available
6.6 Medium
-
spring integration, vmware spring integration +1 more
Unbounded decompression in UnZipTransformer enables zip-bomb DoS
CVE-2026-59274
Fix available
6.5 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Admin password disclosed in BrokerNotAliveException message
CVE-2026-59271
Fix available
5.3 Medium
-
spring security, vmware spring security +1 more
Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces
CVE-2026-59270
Fix available
9.4 Critical
-
spring cloud config, vmware spring cloud config +1 more
Spring Cloud Config Server Native Environment Repository Exposure
CVE-2026-47894
Fix available
4.9 Medium
-
broadcom spring batch, spring batch +1 more
Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File
CVE-2026-47881
Fix available
5.9 Medium
-
spring integration, vmware spring integration +1 more
DefaultJmsHeaderMapper copies all JMS user properties into MessageHeaders without excluding framework-significant names
CVE-2026-47880
Fix available
5.4 Medium
- Show olderLoading…