Skip to contentVmware Spring vulnerabilities
- spring security, vmware spring security +1 moreSAML Payloads Decrypted Without Valid SignatureCVE-2026-41694Fix available3.7 Low
- broadcom spring authorization server, spring authorization server, security +1 more +3 moreSpring Security Authorization Server Open Redirect via request_uriCVE-2026-41008Fix available6.1 Medium
- spring security, vmware spring security +1 moreUnencoded HTML Outputs in Spring Security May Allow Cross-Site ScriptingCVE-2026-41003Fix available7.6 High
- spring security, vmware spring security +1 moreUnfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database EntryCVE-2026-40993Fix available7.3 High
- spring security, vmware spring security +1 moreUnbounded DEFLATE Inflation in SAML 2.0 Service ProviderCVE-2026-40988Fix available7.5 High
- spring hateoas, vmware spring hateoas +1 moreSpring HATEOAS heap exhaustion through unbounded internal cachingCVE-2026-41007Fix available7.5 High
- spring hateoas, vmware spring hateoas +1 moreSpring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configurationCVE-2026-41006Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Unsafe Deserialization via Jackson JMS ConvertersCVE-2026-41855Fix available8.1 High
- spring framework, vmware spring framework +1 moreSpring Framework Server-Side Request Forgery via UriComponentsBuilderCVE-2026-41854Fix available4.2 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Multipart Request Smuggling in Spring MVC and WebFluxCVE-2026-41853Fix available5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Arbitrary Method Invocation in SpEL ExpressionsCVE-2026-41852Fix available3.7 Low
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Unbounded Cache in SpELCVE-2026-41851Fix available5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Algorithmic Denial of Service via SpEL ExpressionsCVE-2026-41850Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Integer Overflow in SpEL ExpressionsCVE-2026-41849Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via AntPathMatcherCVE-2026-41848Fix available3.7 Low
- spring framework, vmware spring framework +1 moreSpring Framework Security Filter Bypass in WebFlux Kotlin Router DSLCVE-2026-418474.8 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Cross-site Scripting via JSP Form TagsCVE-2026-41846Fix available5.9 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Cross-site Scripting via JavaScriptUtilsCVE-2026-41845Fix available7.1 High
- spring framework, vmware spring framework +1 moreSpring Framework Open Redirect in Spring MVC and WebFluxCVE-2026-41844Fix available4.2 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843Fix available5.9 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Versioned Resources in Spring MVC and WebFluxCVE-2026-41842Fix available7.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxCVE-2026-41841Fix available5.9 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Multipart Requests in WebFluxCVE-2026-41840Fix available5.9 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Escalation via Session Fixation in WebFluxCVE-2026-41839Fix available4.2 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Predictable Session ID in WebSocket ModuleCVE-2026-41838Fix available4.8 Medium
- spring cloud function, vmware spring cloud function +1 moreUnbounded cache for function definitionsCVE-2026-40990Fix available5.7 Medium
- spring cloud function, vmware spring cloud function +1 moreSelf Routing guard bypassed via function compositionCVE-2026-40989Fix available5.7 Medium
- spring ai, vmware spring ai +1 moreLLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills APICVE-2026-41863Fix available6.5 Medium
- vmware spring aiPrompt Injection via Memory Poisoning in PromptChatMemoryAdvisorCVE-2026-41713Fix available8.2 High
- vmware spring aiChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakageCVE-2026-41712Fix available7.5 High
- spring ai, vmware spring ai +1 moreSpring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDsCVE-2026-41705Fix available8.6 High
- spring cloud config, vmware spring cloud config, red hat enterprise linux 8 +1 more +3 moreSpring Cloud Config has an Authorization Bypass Through User-Controlled KeyCVE-2026-40981Fix available7.5 High
- spring cloud config, vmware spring cloud config +1 moreSpring Cloud Config Server Susceptible To TOCTOU AttackCVE-2026-41002Fix available7.4 High
- spring cloud config, vmware spring cloud config +1 moreSpring Cloud Config Server Logged Sensitive InformationCVE-2026-41004Fix available4.4 Medium
- spring cloud config, vmware spring cloud config, red hat enterprise linux 8 +1 more +3 moreSpring Cloud Config vulnerable to Path TraversalCVE-2026-40982Public exploitFix available9.1 Critical
- vmware spring frameworkCVE-2026-22745 : Denial of service in static resource handling on Windows platformsCVE-2026-22745Fix available5.3 Medium
- vmware spring frameworkStatic resource cache poisoning in Spring MVC and WebFluxCVE-2026-22741Fix available3.1 Low
- vmware spring frameworkSpring Framework DoS with Multipart Temp Files in WebFluxCVE-2026-22740Fix available6.5 Medium
- spring grpc, vmware spring grpc +1 moreSpring gRPC AuthenticationException message reflected to remote clientCVE-2026-40969Fix available3.7 Low
- spring grpc, vmware spring grpc +1 moreSpring gRPC SecurityContext leaks across requests on authorization failureCVE-2026-40968Fix available4.3 Medium
- spring ai, vmware spring ai +1 moreSpring AI Vulnerable to OOM by attacker-controlled PDFCVE-2026-40980Fix available6.5 Medium
- spring ai, vmware spring ai +1 moreSpring AI's ONNX model cache defaults to world-writable predictable /tmp directoryCVE-2026-40979Fix available6.1 Medium
- spring ai, vmware spring ai +1 moreSpring AI has SQL Injection in CosmosDBVectorStore.doDelete()CVE-2026-40978Fix available8.8 High
- vmware spring aiVectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltrationCVE-2026-40966Fix available5.9 Medium
- spring ai, vmware spring ai +1 moreSpring AI has a VectorStore FilterExpression Converter injectionCVE-2026-40967Fix available8.6 High
- spring boot, vmware spring boot +1 moreSpring Boot's PID file write follows symlinks at predictable default pathCVE-2026-40977Fix available4.7 Medium
- spring boot, vmware spring boot, red hat amq broker 7 +14 more +16 moreSpring Boot's default security filter chain has no authorization rule with Actuator but without HealthCVE-2026-40976Fix available9.1 Critical
- spring boot, vmware spring boot, red hat hawtio hawtio 4.4.0 +14 more +16 moreSpring Boot's random value property source uses a weak PRNG unsuitable for secretsCVE-2026-40975Fix available4.8 Medium
- spring boot, vmware spring boot +1 moreSpring Boot's Cassandra SSL auto-configuration disables TLS hostname verificationCVE-2026-40974Fix available5.0 Medium
- spring boot, vmware spring boot +1 moreSpring Boot accepts predictable temp directory without ownership verificationCVE-2026-40973Fix available7.0 High
- Show moreLoading…