Skip to contentVmware Spring vulnerabilities
- spring integration, vmware spring integration +1 moreUnsafe Java deserialization in SerializingHttpMessageConverter — remote code executionCVE-2026-478646.4 Medium
- spring data rest, vmware spring data rest +1 moreSpring Data REST allows mutation of identifier and version properties via JSON PatchCVE-2026-47849Fix available7.1 High
- spring framework, vmware spring framework +1 moreSpring Framework Server Sent Event stream corruption while rendering fragmentsCVE-2026-47890Fix available9.8 Critical
- spring integration, vmware spring integration +1 moreUDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when acknowledge=falseCVE-2026-47861Fix available6.3 Medium
- spring integration, vmware spring integration +1 moreZipTransformer uses file_name header to build workDirectory path without sanitizationCVE-2026-478625.4 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreUnbounded decompression of attacker-supplied compressed message bodiesCVE-2026-478606.5 Medium
- spring integration, vmware spring integration +1 moreUnbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoSCVE-2026-478595.4 Medium
- spring integration, vmware spring integration +1 moreJsonToObjectTransformer resolves the json__TypeId__ message header to an arbitrary class without an allow-listCVE-2026-47856Fix available6.3 Medium
- spring ai, vmware spring ai +1 morePredictable cache directory location allows local ONNX model substitution in Spring AICVE-2026-478527.5 High
- spring ai, vmware spring ai +1 moreUnbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document ReaderCVE-2026-478517.5 High
- spring data rest, vmware spring data rest +1 moreSpring Data REST allows mutation of the version property of immutable aggregates via PUTCVE-2026-47850Fix available4.3 Medium
- spring security, vmware spring security +1 moreDeterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext CorrelationCVE-2026-478426.5 Medium
- spring data jpa, vmware spring data jpa +1 moreSpring Data JPA Sort expression validation bypassCVE-2026-47834Fix available4.8 Medium
- spring security, vmware spring security +1 moreWebAuthn User Verification Bypass via Session SerializationCVE-2026-478417.4 High
- spring cloud config, vmware spring cloud config +1 moreSpring Cloud Config Server Monitor Endpoint Does Not Validate Webhook RequestsCVE-2026-478376.8 Medium
- spring cloud config, vmware spring cloud config +1 moreSpring Cloud Config Server Susceptible To TOCTOU Attack When Using SVNCVE-2026-478367.2 High
- spring security, vmware spring security +1 moreSpring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof ReplayCVE-2026-417077.4 High
- spring ai, vmware spring ai +1 moreDefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt InjectionCVE-2026-593186.5 Medium
- spring ai, vmware spring ai +1 moreSemantic Cache Cross-Tenant Isolation Bypass via SHA-256 TruncationCVE-2026-593084.2 Medium
- spring ai, vmware spring ai +1 moreUnbounded persistent session allocation via repeated initialize requestsCVE-2026-592797.5 High
- spring for graphql, vmware spring for graphql +1 moreSpring for GraphQL Denial of Service via pagination supportCVE-2026-592897.5 High
- spring for graphql, vmware spring for graphql +1 moreSpring for GraphQL Information Exposure in GraphiQL supportCVE-2026-592887.4 High
- spring for graphql, vmware spring for graphql +1 moreSpring for GraphQL loads Untrusted Resources in GraphiQL supportCVE-2026-592868.1 High
- spring framework, vmware spring framework +1 moreSpring Framework Cross-site Scripting via EscapedErrorsCVE-2026-592816.1 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Path Traversal via Backslash in SpringTemplateLoaderCVE-2026-592804.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketServiceCVE-2026-478937.5 High
- spring framework, vmware spring framework +1 moreSpring Framework Header Predicate Bypass in WebFlux Functional EndpointsCVE-2026-47892Fix available9.8 Critical
- spring framework, vmware spring framework +1 moreSpring Framework Open Redirect in UrlFileNameViewControllerCVE-2026-47887Fix available6.1 Medium
- spring cloud gateway, vmware spring cloud gateway +1 moreSpring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situationsCVE-2026-478258.6 High
- spring ai, vmware spring ai +1 moreSpring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector StoresCVE-2026-47835Fix available8.6 High
- spring for graphql, vmware spring for graphql +1 moreSpring GraphQL Annotation Detection VulnerabilityCVE-2026-41856Fix available7.5 High
- spring for graphql, vmware spring for graphql +1 moreCross-Site WebSocket Hijacking in Spring for GraphQLCVE-2026-41700Fix available8.1 High
- spring for graphql, vmware spring for graphql +1 moreUnsafe Deserialization in Spring GraphQLCVE-2026-41699Fix available8.1 High
- spring boot, vmware spring boot +1 morePredictable Temp Directory in Artemis Auto-configurationCVE-2026-41001Fix available5.3 Medium
- spring boot, vmware spring boot +1 moreMail Auto-Configuration Does Not Enable SSL Hostname VerificationCVE-2026-40992Fix available5.0 Medium
- spring integration, vmware spring integration +1 moreRemote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalizationCVE-2026-40987Public exploitFix available7.1 High
- spring security, vmware spring security +1 moreUnauthorized User Impersonation when Using X.509 Client CertificatesCVE-2026-47838Fix available6.8 Medium
- spring data rest, vmware spring data rest +1 moreSpring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keysCVE-2026-41837Fix available5.3 Medium
- spring for apache pulsar, vmware spring for apache pulsar +1 moreIn Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserializationCVE-2026-41732Fix available8.1 High
- spring for apache kafka, vmware spring for apache kafka, red hat fuse 7 +2 more +4 moreIn Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserializationCVE-2026-41731Fix available8.1 High
- spring data rest, vmware spring data rest +1 moreSpring Data REST exposes persistence-layer internals in error responsesCVE-2026-41730Fix available5.3 Medium
- spring data rest, vmware spring data rest +1 moreSpring Data REST SpEL Injection via Map Key in JSON PatchCVE-2026-41729Public exploitFix available8.1 High
- spring data rest, vmware spring data rest +1 moreSpring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collectionsCVE-2026-41728Fix available7.5 High
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behaviorCVE-2026-41727Fix available6.5 Medium
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector headerCVE-2026-41726Fix available6.5 Medium
- spring data mongodb, vmware spring data mongodb +1 moreSpring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter BindingCVE-2026-41717Fix available8.1 High
- spring amqp, vmware spring advanced message queuing protocol +1 moreIn Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManagerCVE-2026-41714Fix available4.0 Medium
- spring security, vmware spring security +1 moreOpen Redirect When Using CookieRequestCacheCVE-2026-41706Fix available6.1 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreIn Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queuesCVE-2026-41701Fix available4.4 Medium
- spring data mongodb, vmware spring data mongodb +1 moreSpring Data MongoDB Bind Parameter Literal Quoting BreakoutCVE-2026-41696Fix available5.9 Medium
- Show moreLoading…