Spring vulnerabilities
247 CVEs and advisories name Spring as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-41730Spring Data REST exposes persistence-layer internals in error responses
- CVE-2026-41729Spring Data REST SpEL Injection via Map Key in JSON Patch
- CVE-2026-41728Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections
- CVE-2026-41727In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior
- CVE-2026-41726In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header
- CVE-2026-41721Spring Data Commons Denial of Service via Data Binding
- CVE-2026-41719Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator
- CVE-2026-41717Spring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding
- CVE-2026-41716Spring Data web support unbounded negative-result cache keyed on attacker-supplied property names
- CVE-2026-41714In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager
- CVE-2026-41711Potential Denial of Service through crafted Sort Parameters
- CVE-2026-41706Open Redirect When Using CookieRequestCache
- CVE-2026-41701In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues
- CVE-2026-41697Spring Data Relational Parameter not Escaped for Query By Example LIKE Pattern
- CVE-2026-41696Spring Data MongoDB Bind Parameter Literal Quoting Breakout
- CVE-2026-41695Denial of Service in Spring Data Commons Property Path Resolution
- CVE-2026-41694SAML Payloads Decrypted Without Valid Signature
- CVE-2026-41008Spring Security Authorization Server Open Redirect via request_uri
- CVE-2026-41003Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting
- CVE-2026-40993Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry
- CVE-2026-40991XML External Entity (XXE) injection when documenting untrusted XML content
- CVE-2026-40988Unbounded DEFLATE Inflation in SAML 2.0 Service Provider
- CVE-2026-41007Spring HATEOAS heap exhaustion through unbounded internal caching
- CVE-2026-41006Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration
- CVE-2026-41855Spring Framework Unsafe Deserialization via Jackson JMS Converters
- CVE-2026-41854Spring Framework Server-Side Request Forgery via UriComponentsBuilder
- CVE-2026-41853Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux
- CVE-2026-41852Spring Framework Arbitrary Method Invocation in SpEL Expressions
- CVE-2026-41851Spring Framework Denial of Service via Unbounded Cache in SpEL
- CVE-2026-41850Spring Framework Algorithmic Denial of Service via SpEL Expressions