Spring Reactor Core vulnerabilities

• broadcom reactor core Reactor Core bufferTimeout fair-backpressure pipeline permanently hangs when upstream delivers items during an active flush CVE-2026-47863 Fix available 5.9 MediumAugust 26, 2026
• broadcom reactor core Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around CVE-2026-47857 Fix available 5.9 MediumAugust 26, 2026