Spring Framework vulnerabilities

• spring framework, vmware spring framework +1 more Spring Framework response splitting in ContentDisposition CVE-2026-59314 Fix available 3.7 LowAugust 27, 2026
• spring framework, vmware spring framework +1 more Server Sent Event stream corruption in Spring MVC functional web framework CVE-2026-59313 Fix available 9.8 CriticalAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework Safety Guard Bypass via SpEL Expression Compilation CVE-2026-59283 Fix available 9.1 CriticalAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework Denial of Service via Unbounded List Growth in Data Binding CVE-2026-59282 Fix available 7.5 HighAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder CVE-2026-47891 Fix available 9.8 CriticalAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse CVE-2026-47889 Fix available 7.5 HighAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler CVE-2026-47888 Fix available 7.5 HighAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions CVE-2026-47886 Fix available 7.5 HighAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework maxPartSize Ignored in PartEventHttpMessageReader CVE-2026-47885 Fix available 7.5 HighAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework Improper Path Limitation in XsltView CVE-2026-47884 Public exploitFix available 9.8 CriticalAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework Open Redirect in UrlHandlerFilter CVE-2026-47883 Public exploitFix available 6.1 MediumAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework Server Sent Event stream corruption while rendering fragments CVE-2026-47890 Fix available 9.8 CriticalAugust 27, 2026
• spring framework, vmware spring framework +1 more Spring Framework Cross-site Scripting via EscapedErrors CVE-2026-59281 Fix available 6.1 MediumAugust 13, 2026
• spring framework, vmware spring framework +1 more Spring Framework Path Traversal via Backslash in SpringTemplateLoader CVE-2026-59280 Fix available 4.3 MediumAugust 13, 2026
• spring framework, vmware spring framework +1 more Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService CVE-2026-47893 Fix available 7.5 HighAugust 13, 2026
• spring framework, vmware spring framework +1 more Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints CVE-2026-47892 Fix available 9.8 CriticalAugust 13, 2026
• spring framework, vmware spring framework +1 more Spring Framework Open Redirect in UrlFileNameViewController CVE-2026-47887 Fix available 6.1 MediumAugust 13, 2026
• spring framework, vmware spring framework +1 more Spring Framework Unsafe Deserialization via Jackson JMS Converters CVE-2026-41855 Fix available 8.1 HighJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Server-Side Request Forgery via UriComponentsBuilder CVE-2026-41854 Fix available 4.2 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux CVE-2026-41853 Fix available 5.3 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Arbitrary Method Invocation in SpEL Expressions CVE-2026-41852 Fix available 3.7 LowJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Denial of Service via Unbounded Cache in SpEL CVE-2026-41851 Fix available 5.3 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Algorithmic Denial of Service via SpEL Expressions CVE-2026-41850 Fix available 7.5 HighJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Denial of Service via Integer Overflow in SpEL Expressions CVE-2026-41849 Fix available 7.5 HighJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Denial of Service via AntPathMatcher CVE-2026-41848 Fix available 3.7 LowJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL CVE-2026-41847 Fix available 4.8 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Cross-site Scripting via JSP Form Tags CVE-2026-41846 Fix available 5.9 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Cross-site Scripting via JavaScriptUtils CVE-2026-41845 Fix available 7.1 HighJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Open Redirect in Spring MVC and WebFlux CVE-2026-41844 Fix available 4.2 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux CVE-2026-41843 Fix available 5.9 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux CVE-2026-41842 Fix available 7.5 HighJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux CVE-2026-41841 Fix available 5.9 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Denial of Service via Multipart Requests in WebFlux CVE-2026-41840 Fix available 5.9 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Escalation via Session Fixation in WebFlux CVE-2026-41839 Fix available 4.2 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Predictable Session ID in WebSocket Module CVE-2026-41838 Fix available 4.8 MediumJune 9, 2026
• spring framework, vmware spring framework +1 more Spring Framework Improper Path Limitation with Script View Templates CVE-2026-22737 Fix available 5.9 MediumMarch 19, 2026
• spring framework, vmware spring framework +1 more Spring Framework DataBinder Case Sensitive Match Exception CVE-2025-22233 Fix available 3.1 LowMay 16, 2025
• spring framework, vmware spring framework, netapp active iq unified manager +1 more +3 more CVE-2024-38808: Spring Expression DoS Vulnerability CVE-2024-38808 Fix available 4.3 MediumAugust 20, 2024
• spring framework, vmware spring framework +1 more CVE-2024-22262: Spring Framework URL Parsing with Host Validation CVE-2024-22262 Public exploitFix available 8.1 HighApril 16, 2024
• spring framework, vmware spring framework, netapp active iq unified manager +2 more CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report) CVE-2024-22259 Fix available 8.1 HighMarch 16, 2024
• pivotal software spring framework, spring framework, netapp active iq unified manager +2 more CVE-2024-22243: Spring Framework URL Parsing with Host Validation CVE-2024-22243 Public exploitFix available 8.1 HighFebruary 23, 2024
• spring framework, vmware spring framework +1 more CVE-2024-22233: Spring Framework server Web DoS Vulnerability CVE-2024-22233 Fix available 7.5 HighJanuary 22, 2024
• spring framework, vmware spring framework +1 more Spring Framework server Web Observations DoS Vulnerability CVE-2023-34053 Fix available 5.3 MediumNovember 28, 2023
• spring framework, vmware spring framework, oracle application testing suite +25 more +27 more CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux CVE-2020-5397 Fix available 5.3 MediumJanuary 17, 2020
• spring framework, vmware spring framework, netapp data availability services +31 more +33 more RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application CVE-2020-5398 Public exploitFix available EPSS 88.3% 8.0 HighJanuary 16, 2020