CLEANSTART-2026-ED42524 Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded...

🗓️ 10 Sep 2026 02:46:42Reported by GoogleType

osv🔗 osv.dev👁 7 Views

DoS in spring-boot via user-supplied SpEL expressions triggering unbounded cache growth.

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2026-22745	29 Apr 202611:35	–	cve
CVE	CVE-2026-41848	9 Jun 202603:51	–	cve
CVE	CVE-2026-41851	9 Jun 202603:51	–	cve
CVE	CVE-2026-54399	1 Jul 202617:02	–	cve
CVE	CVE-2026-54428	1 Jul 202617:03	–	cve

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ED42524.json
osv	www.osv.dev/vulnerability/CVE-2026-22745
osv	www.osv.dev/vulnerability/CVE-2026-41848
osv	www.osv.dev/vulnerability/CVE-2026-41851
osv	www.osv.dev/vulnerability/CVE-2026-54399
osv	www.osv.dev/vulnerability/CVE-2026-54428
osv	www.osv.dev/vulnerability/ghsa-4265-ccf5-phj5
osv	www.osv.dev/vulnerability/ghsa-4g9r-vxhx-9pgx
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22745
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41848

18 Sep 2026 12:16Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.8

EPSS0.0087

spring-boot SpEL expressions Denial of Service unbounded cache growth user-supplied input