Spring vulnerabilities
247 CVEs and advisories name Spring as an affected vendor, newest first. Follow it as a feed.
- CVE-2019-3799Directory Traversal with spring-cloud-config-server
- CVE-2019-3797Additional information exposure with Spring Data JPA derived queries
- CVE-2019-3795Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security
- CVE-2019-3778Open Redirect in spring-security-oauth2
- CVE-2019-3774Spring Batch XML External Entity Injection (XXE)
- CVE-2019-3773Spring Web Services XML External Entity Injection (XXE)
- CVE-2019-3772Spring Integration XML External Entity Injection (XXE)