Skip to contentSpring vulnerabilities
Newest
- spring cloud gateway, vmware spring cloud gateway +1 moreSpring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situationsCVE-2026-478258.6 High
- broadcom spring cloud sleuth, spring cloud sleuth +1 moreSpring Cloud Sleuth instrumentation of Spring TX DoS vulnerabilityCVE-2026-417087.5 High
- spring ai, vmware spring ai +1 moreSpring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector StoresCVE-2026-47835Fix available8.6 High
- spring for graphql, vmware spring for graphql +1 moreSpring GraphQL Annotation Detection VulnerabilityCVE-2026-41856Fix available7.5 High
- spring for graphql, vmware spring for graphql +1 moreCross-Site WebSocket Hijacking in Spring for GraphQLCVE-2026-41700Fix available8.1 High
- spring for graphql, vmware spring for graphql +1 moreUnsafe Deserialization in Spring GraphQLCVE-2026-41699Fix available8.1 High
- spring boot, vmware spring boot +1 morePredictable Temp Directory in Artemis Auto-configurationCVE-2026-41001Fix available5.3 Medium
- broadcom spring web services, spring web services +1 moreWSS4J validation does not use configured replay cacheCVE-2026-41000Fix available3.7 Low
- broadcom spring web services, spring web services +1 moreSpring WS SSRF via unvalidated WS-Addressing reply destinationsCVE-2026-40999Fix available8.6 High
- broadcom spring web services, spring web services +1 moreJaxp13 XPath XXE via StreamSource and SAXSourceCVE-2026-40998Fix available8.2 High
- broadcom spring web services, spring web services +1 moreSOAP security faults leak Spring Security account stateCVE-2026-40997Fix available5.3 Medium
- broadcom spring web services, spring web services +1 moreInbound WS-Security allows RSA PKCS#1 v1.5 key transport by defaultCVE-2026-40996Fix available4.8 Medium
- broadcom spring web services, spring web services +1 moreX.509 authentication bypasses Spring Security account checksCVE-2026-40995Fix available5.4 Medium
- broadcom spring web services, spring web services +1 moreWss4jSecurityInterceptor disables WS-I BSP validation by defaultCVE-2026-40994Fix available8.2 High
- spring boot, vmware spring boot +1 moreMail Auto-Configuration Does Not Enable SSL Hostname VerificationCVE-2026-40992Fix available5.0 Medium
- spring integration, vmware spring integration +1 moreRemote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalizationCVE-2026-40987Public exploitFix available7.1 High
- broadcom spring web flow, spring web flow +1 moreSpring Web Flow JS RemotingHandler renders non-HTML Response as HTMLCVE-2026-40986Fix available4.8 Medium
- broadcom spring web flow, spring web flow +1 moreData Binding Vulnerability in Spring Web Flow with Unified EL ParserCVE-2026-40985Fix available6.4 Medium
- spring security, vmware spring security +1 moreUnauthorized User Impersonation when Using X.509 Client CertificatesCVE-2026-47838Fix available6.8 Medium
- spring data rest, vmware spring data rest +1 moreSpring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keysCVE-2026-41837Fix available5.3 Medium
- spring for apache pulsar, vmware spring for apache pulsar +1 moreIn Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserializationCVE-2026-41732Fix available8.1 High
- spring for apache kafka, vmware spring for apache kafka, red hat fuse 7 +2 more +4 moreIn Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserializationCVE-2026-41731Fix available8.1 High
- spring data rest, vmware spring data rest +1 moreSpring Data REST exposes persistence-layer internals in error responsesCVE-2026-41730Fix available5.3 Medium
- spring data rest, vmware spring data rest +1 moreSpring Data REST SpEL Injection via Map Key in JSON PatchCVE-2026-41729Public exploitFix available8.1 High
- spring data rest, vmware spring data rest +1 moreSpring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collectionsCVE-2026-41728Fix available7.5 High
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behaviorCVE-2026-41727Fix available6.5 Medium
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector headerCVE-2026-41726Fix available6.5 Medium
- broadcom spring data commons, spring data commons +1 moreSpring Data Commons Denial of Service via Data BindingCVE-2026-41721Fix available5.9 Medium
- broadcom spring data keyvalue, spring data redis, spring data keyvalue +1 more +3 moreSpring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparatorCVE-2026-41719Fix available6.4 Medium
- spring data mongodb, vmware spring data mongodb +1 moreSpring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter BindingCVE-2026-41717Fix available8.1 High
- broadcom spring data commons, spring data commons +1 moreSpring Data web support unbounded negative-result cache keyed on attacker-supplied property namesCVE-2026-41716Fix available7.5 High
- spring amqp, vmware spring advanced message queuing protocol +1 moreIn Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManagerCVE-2026-41714Fix available4.0 Medium
- broadcom spring data commons, spring data commons +1 morePotential Denial of Service through crafted Sort ParametersCVE-2026-41711Fix available5.9 Medium
- spring security, vmware spring security +1 moreOpen Redirect When Using CookieRequestCacheCVE-2026-41706Fix available6.1 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreIn Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queuesCVE-2026-41701Fix available4.4 Medium
- broadcom spring data relational, spring data relational, data jdbc +1 more +3 moreSpring Data Relational Parameter not Escaped for Query By Example LIKE PatternCVE-2026-41697Fix available4.8 Medium
- spring data mongodb, vmware spring data mongodb +1 moreSpring Data MongoDB Bind Parameter Literal Quoting BreakoutCVE-2026-41696Fix available5.9 Medium
- broadcom spring data commons, spring data commons +1 moreDenial of Service in Spring Data Commons Property Path ResolutionCVE-2026-41695Fix available7.5 High
- spring security, vmware spring security +1 moreSAML Payloads Decrypted Without Valid SignatureCVE-2026-41694Fix available3.7 Low
- broadcom spring authorization server, spring authorization server, security +1 more +3 moreSpring Security Authorization Server Open Redirect via request_uriCVE-2026-41008Fix available6.1 Medium
- spring security, vmware spring security +1 moreUnencoded HTML Outputs in Spring Security May Allow Cross-Site ScriptingCVE-2026-41003Fix available7.6 High
- spring security, vmware spring security +1 moreUnfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database EntryCVE-2026-40993Fix available7.3 High
- broadcom spring rest docs, spring rest docs +1 moreXML External Entity (XXE) injection when documenting untrusted XML contentCVE-2026-40991Fix available5.9 Medium
- spring security, vmware spring security +1 moreUnbounded DEFLATE Inflation in SAML 2.0 Service ProviderCVE-2026-40988Fix available7.5 High
- spring hateoas, vmware spring hateoas +1 moreSpring HATEOAS heap exhaustion through unbounded internal cachingCVE-2026-41007Fix available7.5 High
- spring hateoas, vmware spring hateoas +1 moreSpring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configurationCVE-2026-41006Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Unsafe Deserialization via Jackson JMS ConvertersCVE-2026-41855Fix available8.1 High
- spring framework, vmware spring framework +1 moreSpring Framework Server-Side Request Forgery via UriComponentsBuilderCVE-2026-41854Fix available4.2 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Multipart Request Smuggling in Spring MVC and WebFluxCVE-2026-41853Fix available5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Arbitrary Method Invocation in SpEL ExpressionsCVE-2026-41852Fix available3.7 Low
- Show moreLoading…