Spring vulnerabilities
247 CVEs and advisories name Spring as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-59324fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
- CVE-2026-59322EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
- CVE-2026-59321Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check
- CVE-2026-59320In Spring AMQP the link credit never replenished on listener exception path
- CVE-2026-59319RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure
- CVE-2026-59317In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
- CVE-2026-59316Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
- CVE-2026-59315Spring Cloud Config Monitor Denial of Service
- CVE-2026-59314Spring Framework response splitting in ContentDisposition
- CVE-2026-59311Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creation
- CVE-2026-59306Potential for deserialization of untrusted types in Spring Cloud Stream
- CVE-2026-59313Server Sent Event stream corruption in Spring MVC functional web framework
- CVE-2026-59307Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference
- CVE-2026-59305Partition interceptor may be improperly added while sending message
- CVE-2026-59304Improper caching of the original content type in Spring Cloud Stream Avro
- CVE-2026-59303Dynamic destination cache size is not properly bound in Spring Cloud Stream
- CVE-2026-59302Potential for logging sensitive data in Spring Cloud Stream
- CVE-2026-59301Potential for logging sensitive data in Spring Cloud Function Azure
- CVE-2026-59300Potential for logging sensitive data in Spring Cloud Function AWS
- CVE-2026-59299Composition lookup can potentially poison base function in Spring Cloud Function
- CVE-2026-59298Potential for improper filtering of HTTP headers in Spring Cloud Function
- CVE-2026-59297Spring Cloud Function can incorrectly determine if URI is secure
- CVE-2026-59294Arbitrary File Write via Path Traversal in ResourceCacheService
- CVE-2026-59293SMB minimum protocol dialect defaults to SMB1
- CVE-2026-59292World-readable metadata file in PropertiesPersistingMetadataStore (insecure temp-file permissions)
- CVE-2026-59291Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function
- CVE-2026-59289Spring for GraphQL Denial of Service via pagination support
- CVE-2026-59288Spring for GraphQL Information Exposure in GraphiQL support
- CVE-2026-59287Spring for GraphQL WebSocket Client Denial of Service
- CVE-2026-59286Spring for GraphQL loads Untrusted Resources in GraphiQL support