ROOT-APP-MAVEN-CVE-2025-41232 CVE-2025-41232 in org.springframework.security:spring-security-core - Patched by Root

🗓️ 18 Sep 2026 13:08:42Reported by GoogleType

osv_root🔗 osv.dev👁 19 Views

CVE-2025-41232 in spring-security-core Maven package patched by Root.

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: Maximo AI Service Component: Spring Security Aspects may not correctly locate method security annotations on private methods.	5 Jun 202507:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-security-core-6.4.5.jar	29 Aug 202506:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.1.0	5 Dec 202509:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2025.	12 Jan 202617:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in spring-security-core-6.4.5.jar (CVE-2025-41232)	24 Oct 202506:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Security, Handlebars, Apache MINA and Apache Tomcat might affect IBM Storage Defender Copy Data Management	26 Jun 202617:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services vulnerable to spring-security-core-6.4.3.jar (CVE-2025-41232)	27 Jun 202506:26	–	ibm
attackerkb	CVE-2025-41232	21 May 202512:16	–	attackerkb
BDU FSTEC	Spring Security Bypass Authentication	26 May 202500:00	–	bdu_fstec
Circl	CVE-2025-41232	21 May 202512:26	–	circl

18 Sep 2026 14:15Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.1

EPSS0.00619

SSVC

spring-security-core Maven package library CVE-2025-41232 Root