Spring vulnerabilities
The newest vulnerabilities affecting Spring, up to 200. Subscribe by RSS.
- CVE-2026-96678weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversalweiqingwen spring-boot-forum
- CVE-2026-90595wxiaoqi Spring-Cloud-Platform OnlineController.java OnlineController.getOnlineInfo authorizationwxiaoqi Spring-Cloud-Platform
- CVE-2026-90594wxiaoqi Spring-Cloud-Platform Permission Service PermissionService.java PermissionService.checkUserPermission authorizationwxiaoqi Spring-Cloud-Platform
- CVE-2026-69854Spring Cloud Azure Elevation of Privilege VulnerabilityMicrosoft Spring Cloud Azure
- CVE-2026-59315Spring Cloud Config Monitor Denial of ServiceSpring Cloud Config
- CVE-2026-59314Spring Framework response splitting in ContentDispositionSpring Framework
- CVE-2026-59306Potential for deserialization of untrusted types in Spring Cloud StreamSpring Cloud Stream
- CVE-2026-59313Server Sent Event stream corruption in Spring MVC functional web frameworkSpring Framework
- CVE-2026-59305Partition interceptor may be improperly added while sending messageSpring Cloud Stream
- CVE-2026-59304Improper caching of the original content type in Spring Cloud Stream AvroSpring Cloud Stream
- CVE-2026-59303Dynamic destination cache size is not properly bound in Spring Cloud StreamSpring Cloud Stream
- CVE-2026-59302Potential for logging sensitive data in Spring Cloud StreamSpring Cloud Stream
- CVE-2026-59301Potential for logging sensitive data in Spring Cloud Function AzureSpring Cloud Function
- CVE-2026-59300Potential for logging sensitive data in Spring Cloud Function AWSSpring Cloud Function
- CVE-2026-59299Composition lookup can potentially poison base function in Spring Cloud FunctionSpring Cloud Function
- CVE-2026-59298Potential for improper filtering of HTTP headers in Spring Cloud FunctionSpring Cloud Function
- CVE-2026-59297Spring Cloud Function can incorrectly determine if URI is secureSpring Cloud Function
- CVE-2026-59291Potential arbitrary file read and SSRF vulnerability in Spring Cloud FunctionSpring Cloud Function
- CVE-2026-59284Spring Cloud Commons no allow list for writable env actuator endpointSpring Cloud Commons
- CVE-2026-59283Spring Framework Safety Guard Bypass via SpEL Expression CompilationSpring Framework
- CVE-2026-59282Spring Framework Denial of Service via Unbounded List Growth in Data BindingSpring Framework
- CVE-2026-59281Spring Framework Cross-site Scripting via EscapedErrorsSpring Framework
- CVE-2026-59277Spring Security InetAddressMatchers Incomplete Internal Network ClassificationSpring Security
- CVE-2026-59276Timing Attack via Non-Constant-Time Comparison of Sensitive ValuesSpring Security
- CVE-2026-59280Spring Framework Path Traversal via Backslash in SpringTemplateLoaderSpring Framework
- CVE-2026-59354Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadataVMware by Broadcom Spring Security
- CVE-2026-47893Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketServiceSpring Framework
- CVE-2026-47892Spring Framework Header Predicate Bypass in WebFlux Functional EndpointsSpring Framework · org.springframework:spring-webflux
- CVE-2026-47891Spring Framework maxInMemorySize Bypassed in Jaxb2DecoderSpring Framework
- CVE-2026-47890Spring Framework Server Sent Event stream corruption while rendering fragmentsSpring Framework · org.springframework:spring-webflux +1
- CVE-2026-47889Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponseSpring Framework
- CVE-2026-47888Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandlerSpring Framework
- CVE-2026-47887Spring Framework Open Redirect in UrlFileNameViewControllerSpring Framework
- CVE-2026-47886Spring Framework Denial of Service via Unbounded Exponentiation in SpEL ExpressionsSpring Framework
- CVE-2026-47885Spring Framework maxPartSize Ignored in PartEventHttpMessageReaderSpring Framework
- CVE-2026-47884Spring Framework Improper Path Limitation in XsltViewSpring Framework · org.springframework:spring-webmvc
- CVE-2026-47883Spring Framework Open Redirect in UrlHandlerFilterSpring Framework
- CVE-2026-59270Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfacesSpring Security
- CVE-2026-47894Spring Cloud Config Server Native Environment Repository ExposureSpring Cloud Config
- CVE-2026-47879Spring Cloud Gateway SSRF and native file access with gRPCSpring Cloud Gateway
- CVE-2026-47877Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)Spring Security
- CVE-2026-47842Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext CorrelationSpring Security
- CVE-2026-47841WebAuthn User Verification Bypass via Session SerializationSpring Security
- CVE-2026-47837Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook RequestsSpring Cloud Config
- CVE-2026-47836Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVNSpring Cloud Config
- CVE-2026-41707Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof ReplaySpring Security
- CVE-2026-62242Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registrationcodecentric spring-boot-admin
- CVE-2026-47825Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies in certain situationsSpring Cloud Gateway
- CVE-2026-41708Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerabilitySpring Cloud Sleuth · org.springframework.cloud:spring-clou…
- CVE-2026-41001Predictable Temp Directory in Artemis Auto-configurationSpring Boot · org.springframework.boot:spring-boot-autoconf…
- CVE-2026-40992Mail Auto-Configuration Does Not Enable SSL Hostname VerificationSpring Boot · org.springframework.boot:spring-boot-starter-…
- CVE-2026-47838Unauthorized User Impersonation when Using X.509 Client CertificatesSpring Security · org.springframework.security:spring-secur…
- CVE-2026-41706Open Redirect When Using CookieRequestCacheSpring Security · org.springframework.security:spring-secur…
- CVE-2026-41694SAML Payloads Decrypted Without Valid SignatureSpring Security · org.springframework.security:spring-secur…
- CVE-2026-41008Spring Security Authorization Server Open Redirect via request_uriSpring Security · Spring Authorization Server +1
- CVE-2026-41003Unencoded HTML Outputs in Spring Security May Allow Cross-Site ScriptingSpring Security · org.springframework.security:spring-secur…
- CVE-2026-40993Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database EntrySpring Security · org.springframework.security:spring-secur…
- CVE-2026-40988Unbounded DEFLATE Inflation in SAML 2.0 Service ProviderSpring Security · org.springframework.security:spring-secur…
- CVE-2026-41855Spring Framework Unsafe Deserialization via Jackson JMS ConvertersSpring Framework · org.springframework:spring-jms
- CVE-2026-41854Spring Framework Server-Side Request Forgery via UriComponentsBuilderSpring Framework · org.springframework:spring-web
- CVE-2026-41853Spring Framework Multipart Request Smuggling in Spring MVC and WebFluxSpring Framework · org.springframework:spring-webmvc +1
- CVE-2026-41852Spring Framework Arbitrary Method Invocation in SpEL ExpressionsSpring Framework · org.springframework:spring-expression
- CVE-2026-41851Spring Framework Denial of Service via Unbounded Cache in SpELSpring Framework · org.springframework:spring-expression
- CVE-2026-41850Spring Framework Algorithmic Denial of Service via SpEL ExpressionsSpring Framework · org.springframework:spring-expression
- CVE-2026-41849Spring Framework Denial of Service via Integer Overflow in SpEL ExpressionsSpring Framework · org.springframework:spring-expression
- CVE-2026-41848Spring Framework Denial of Service via AntPathMatcherSpring Framework · org.springframework:spring-core
- CVE-2026-41847Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSLSpring Framework · org.springframework:spring-webflux
- CVE-2026-41846Spring Framework Cross-site Scripting via JSP Form TagsSpring Framework · org.springframework:spring-webmvc
- CVE-2026-41845Spring Framework Cross-site Scripting via JavaScriptUtilsSpring Framework · org.springframework:spring-webmvc
- CVE-2026-41844Spring Framework Open Redirect in Spring MVC and WebFluxSpring Framework · org.springframework:spring-webmvc +1
- CVE-2026-41843Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxSpring Framework · org.springframework:spring-webmvc +1
- CVE-2026-41842Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFluxSpring Framework · org.springframework:spring-webmvc +1
- CVE-2026-41841Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxSpring Framework · org.springframework:spring-webmvc +1
- CVE-2026-41840Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests.Spring Framework · org.springframework:spring-webflux
- CVE-2026-41839Spring Framework Escalation via Session Fixation in WebFluxSpring Framework · org.springframework:spring-webflux
- CVE-2026-41838Spring Framework Predictable Session ID in WebSocket ModuleSpring Framework · org.springframework:spring-websocket
- CVE-2026-40990Unbounded cache for function definitionsSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2026-40989Self Routing guard bypassed via function compositionSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2026-44308Spring Cloud AWS: Missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notificationsawspring spring-cloud-aws · io.awspring.cloud spring-clo… +1
- CVE-2026-40981When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentiaSpring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2026-41002The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptSpring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2026-41004When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.Spring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2026-40982Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module.Spring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2026-22745CVE-2026-22745 : Denial of service in static resource handling on Windows platformsVMware Spring Framework · org.springframework:spring-web… +1
- CVE-2026-22741Static resource cache poisoning in Spring MVC and WebFluxVMware Spring Framework · org.springframework:spring-web… +1
- CVE-2026-22740Spring Framework DoS with Multipart Temp Files in WebFluxVMware Spring Framework · org.springframework:spring-webflux
- CVE-2026-40977When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corruSpring Boot · org.springframework.boot:spring-boot-cassandra
- CVE-2026-40976In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints.Spring Boot · org.springframework.boot:spring-boot
- CVE-2026-40975Values produced by ${random.value} are not suitable for use as secrets.Spring Boot · org.springframework.boot:spring-boot-cassandra
- CVE-2026-40974Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra.Spring Boot · org.springframework.boot:spring-boot-cassandra
- CVE-2026-40973A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`.Spring Boot · org.springframework.boot:spring-boot
- CVE-2026-40972An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote seSpring Boot · org.springframework.boot:spring-boot-devtools
- CVE-2026-40971When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to thSpring Boot · org.springframework.boot:spring-boot-rabbitmq
- CVE-2026-40970When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting Spring Boot · org.springframework.boot:spring-boot-elastics…
- CVE-2026-22754ervlet Path Not Correctly Included in Path Matching of XML Authorization RulesSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22753Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchersSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22748Potential Security Misconfiguration when Using withIssuerLocationSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22747Unauthorized User Impersonation when Using X.509 Client CertificatesSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22746User Attribute Enumeration when Using DaoAuthenticationProviderSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22751Spring Security JdbcOneTimeTokenService allows a one-time token to authenticate multiple sessionsSpring Security · org.springframework.security:spring-secur…
- CVE-2026-22750SSL bundle configuration silently bypassed in Spring Cloud GatewayVMware Spring Cloud Gateway · org.springframework.cloud:spr…
- CVE-2026-22739Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF AttacksSpring Cloud · org.springframework.cloud:spring-cloud-confi…
- CVE-2026-22737Spring Framework Improper Path Limitation with Script View TemplatesSpring Framework · org.springframework:spring-webmvc +1
- CVE-2026-22733Authentication Bypass under Actuator CloudFoundry endpointsSpring Security · org.springframework.boot:spring-boot-star…
- CVE-2026-22732Under Some Conditions Spring Security HTTP Headers Are not WrittenVMware Spring Security · org.springframework.security:sprin…
- CVE-2026-22731Authentication Bypass under Actuator Health groups pathsSpring Boot · org.springframework.boot:spring-boot-starter-…
- CVE-2025-22234Spring Security - BCrypt Password Encoder maximum password length breaks timing attack mitigationSpring Security · org.springframework.security:spring-secur…
- CVE-2025-41254Spring Framework STOMP CSRF VulnerabilityVMware Spring Framework · org.springframework:spring-websoc…
- CVE-2025-41253Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment VariablesVMware Spring Cloud Gateway Server Webflux · org.springfram…
- CVE-2025-41249CVE-2025-41249: Spring Framework Annotation Detection VulnerabilityVMware Spring Framework · org.springframework:spring-core
- CVE-2025-41248CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized typesVMware Spring Security · org.springframework.security:sprin…
- CVE-2025-41242CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containersVMware Spring Framework · org.springframework:spring-webmvc
- CVE-2025-6108hansonwang99 Spring-Boot-In-Action File Upload ImageUploadService.java watermarkTest path traversalhansonwang99 Spring-Boot-In-Action
- CVE-2025-41234RFD Attack via “Content-Disposition” Header Sourced from RequestVMware Spring Framework · org.springframework:spring-web
- CVE-2025-41235CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted ProxiesVMware Spring cloud Gateway · org.springframework.cloud:… +1
- CVE-2025-41232CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methodsSpring Security · org.springframework.security:spring-se… +1
- CVE-2025-22233Spring Framework DataBinder Case Sensitive Match ExceptionSpring Framework · org.springframework:spring-context
- CVE-2025-4511vector4wang spring-boot-quick quick-img2txt Img2TxtController.java ResponseEntity path traversalvector4wang spring-boot-quick
- CVE-2025-4328fp2952 spring-cloud-base HTTP Header MvcController.java sendBack redirectfp2952 spring-cloud-base
- CVE-2025-4175AlanBinu007 Spring-Boot-Advanced-Projects Upload Profile API Endpoint UserProfileController.java uploadUserProfileImage path traversalAlanBinu007 Spring-Boot-Advanced-Projects
- CVE-2025-22235Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposedSpring Boot · org.springframework.boot:spring-boot
- CVE-2025-22232Spring Cloud Config Server May Not Use Vault Token Sent By ClientsSpring Cloud Config
- CVE-2025-22223Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods.Spring Security · org.springframework.security:spring-secur…
- CVE-2025-22228CVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password lengthSpring Security · org.springframework.security:spring-secur…
- CVE-2024-38819Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacksSpring Framework · org.springframework:spring-webflux +1
- CVE-2024-38827Spring Security Authorization Bypass for Case Sensitive ComparisonsSpring by VMware Tanzu Spring Security · org.springframewor…
- CVE-2024-38820CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match ExceptionVMware Spring · org.springframework:spring-context +1
- CVE-2024-38809Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.Spring Framework · org.springframework:spring-web
- CVE-2024-38807CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's LoaderSpring Boot · org.springframework.boot:spring-boot-loader +1
- CVE-2024-38808CVE-2024-38808: Spring Expression DoS VulnerabilitySpring Framework · org.springframework:spring-expression
- CVE-2024-38810Missing Authorization When Using @AuthorizeReturnObjectspring security · org.springframework.security:spring-secur…
- CVE-2024-37084CVE-2024-37084: Remote code execution in Spring Cloud Data FlowSpring Cloud Data Flow · org.springframework.cloud:spring-c…
- CVE-2024-22271Spring Cloud Function Web DOS VulnerabilitySpring by VMware Tanzu Spring Cloud Function Framework · or…
- CVE-2024-22263Arbitrary File Write Vulnerability in Spring Cloud Data FlowSpring by VMware Tanzu Spring Cloud Skipper
- CVE-2024-22262CVE-2024-22262: Spring Framework URL Parsing with Host ValidationSpring Framework · org.springframework:spring-web
- CVE-2024-22257In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, vSpring Security · org.springframework.security:spring-secur…
- CVE-2024-22259CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)Spring Framework · org.springframework:spring-web
- CVE-2024-22243CVE-2024-22243: Spring Framework URL Parsing with Host ValidationSpring Framework · org.springframework:spring-web
- CVE-2024-22234CVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticatedSpring Security · org.springframework.security:spring-secur…
- CVE-2023-34042The spring-security.xsd file inside the spring-security-config jar is world writable which means that if it were extracted it could be wriSpring Security · org.springframework.security:spring-secur…
- CVE-2024-22236In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution iSpring Cloud Contract · org.springframework.cloud:spring-cl…
- CVE-2024-22233CVE-2024-22233: Spring Framework server Web DoS VulnerabilitySpring Framework · org.springframework:spring-core
- CVE-2023-34055Spring Boot server Web Observations DoS VulnerabilitySpring Boot · org.springframework.boot:spring-boot-actuator
- CVE-2023-34053Spring Framework server Web Observations DoS VulnerabilitySpring Framework · org.springframework:spring-webmvc
- CVE-2023-34034Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and SpSpring Security · org.springframework.security:spring-secur…
- CVE-2023-34035Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfigSpring Security · org.springframework.security:spring-secur…
- CVE-2023-20883In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential forSpring Boot · org.springframework.boot:spring-boot-autoconf…
- CVE-2023-20873In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed to Cloud Foundry coulSpring Boot · org.springframework.boot:spring-boot-actuator…
- CVE-2023-20862In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support doesSpring Security · org.springframework.security:spring-secur…
- CVE-2023-20863In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL exSpring Framework · org.springframework:spring-expression
- CVE-2023-20860Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequesSpring Framework · org.springframework:spring +1
- CVE-2023-20861In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible fSpring Framework · org.springframework:spring-expression
- CVE-2022-46166Spring Boot Admins integrated notifier support allows arbitrary code executioncodecentric spring-boot-admin · de.codecentric:spring-boot-…
- CVE-2022-31690Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escSpring Security · org.springframework.security:spring-secur…
- CVE-2022-22979In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionalSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2022-22976Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerabilSpring Security · org.springframework.security:spring-secur…
- CVE-2022-22978In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigureSpring Security · org.springframework.security:spring-se… +1
- CVE-2022-22971In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vuSpring Framework · org.springframework:spring-messaging
- CVE-2022-22970In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable tSpring Framework · org.springframework:spring-beans
- CVE-2022-22969<Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-ServicSpring Security OAuth · org.springframework.security.oauth:…
- CVE-2022-22968In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBindSpring Framework · org.springframework:spring-context
- CVE-2022-22950n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expSpring Framework · org.springframework:spring-expression
- CVE-2022-22965A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.Spring Framework · org.springframework:spring-beans +4
- CVE-2022-22963In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user toSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2022-27772spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking.org.springframework.boot:spring-boot
- CVE-2022-22946In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificatesSpring Cloud Gateway
- CVE-2022-22947In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway ActuatSpring Cloud Gateway · org.springframework.cloud:spring-clo…
- CVE-2021-22060In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious Spring Framework · org.springframework:spring-core
- CVE-2021-22053Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted Spring Cloud Netflix · org.springframework.cloud:spring-clo…
- CVE-2021-22051Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream serviSpring Cloud Gateway · org.springframework.cloud:spring-clo…
- CVE-2021-22096In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious Spring Framework · org.springframework:spring-core +1
- CVE-2021-22044In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@ReSpring Cloud OpenFeign · org.springframework.cloud:spring-c…
- CVE-2021-22119Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a DeSpring Security · org.springframework.security:spring-se… +1
- CVE-2021-22118In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege esSpring Framework · org.springframework:spring-web
- CVE-2021-22112Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail toSpring Security · org.springframework.security:spring-se… +1
- CVE-2021-22113Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassingSpring Cloud Netflix Zuul · org.springframework.cloud:sprin…
- CVE-2020-5428Possibility of SQL Injection in Spring Cloud Task Execution Sorting QuerySpring by VMware Spring Cloud Task · org.springframework.cl…
- CVE-2020-5427Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting QuerySpring by VMware Spring Cloud Data Flow
- CVE-2021-21234Directory Traversallukashinsch spring-boot-actuator-logview · eu.hinsch:spring…
- CVE-2020-5421RFD Protection Bypass via jsessionidSpring by VMware Spring Framework · org.springframework:spr…
- CVE-2020-5412Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboardSpring by VMware Spring Cloud Netflix · org.springframework…
- CVE-2020-5410Directory Traversal with spring-cloud-config-serverSpring by VMware Spring Cloud Config · org.springframework.…
- CVE-2020-5408Dictionary attack with Spring Security queryable text encryptorSpring by VMware Spring Security · org.springframework.secu…
- CVE-2020-5407Signature Wrapping Vulnerability with spring-security-saml2-service-providerSpring by VMware Spring Security · org.springframework.secu…
- CVE-2020-5405Directory Traversal with spring-cloud-config-serverSpring by VMware Spring Cloud Config · org.springframework.…
- CVE-2020-5397CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxSpring Framework · org.springframework:spring-webmvc +1
- CVE-2020-5398RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationSpring Framework · org.springframework:spring-webmvc +1
- CVE-2013-6430The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properlPivotal Spring MVC · org.springframework:spring-web
- CVE-2016-1000027Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untruorg.springframework:spring-web
- CVE-2019-11272PlaintextPasswordEncoder authenticates encoded passwords that are nullSpring Security · org.springframework.security:spring-se… +1
- CVE-2019-11269Open Redirector in spring-security-oauth2Spring Security OAuth · org.springframework.security.oauth:…
- CVE-2019-3799Directory Traversal with spring-cloud-config-serverSpring Cloud Config · org.springframework.cloud:spring-clou…
- CVE-2019-3797Additional information exposure with Spring Data JPA derived queriesSpring Boot · org.springframework.data:spring-data-jpa
- CVE-2019-3795Insecure Randomness When Using a SecureRandom Instance Constructed by Spring SecuritySpring Security · org.springframework.security:spring-secur…
- CVE-2019-3778Open Redirect in spring-security-oauth2Spring Security OAuth · org.springframework.security.oau… +1
- CVE-2018-15801Authorization Bypass During JWT Issuer Validation with spring-securitySpring by Pivotal Spring Security · org.springframework.… +1
- CVE-2018-15756DoS Attack via Range RequestsPivotal Spring framework · org.springframework:spring-core
- CVE-2018-15758Privilege Escalation in spring-security-oauth2Pivotal Spring Security OAuth · org.springframework.securit…
- CVE-2018-11039Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to cPivotal Spring Framework · org.springframework:spring-web
- CVE-2018-11040Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable Pivotal Spring Framework · org.springframework:spring-core