PT-2026-48620

Name of the Vulnerable Software and Affected Versions Spring Web Services versions 5.0.0 through 5.0.1 Spring Web Services versions 4.1.0 through 4.1.3 Spring Web Services versions 4.0.0 through 4.0.18 Spring Web Services versions 3.1.0 through 3.1.8 Description Integration paths between Spring W...

CVE-2026-40997: Generation of Error Message Containing Sensitive Information

Several Spring WS integration paths with Spring Security could surface detailed account state for example locked or disabled user semantics to remote SOAP clients through exception messages or callback outcomes, instead of failing with generic authentication errors. That behavior assists remote...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0-m1, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0-m1, =1.52.0, =2.0.1, =4.0.0-m1, =4.0.0-m1, =4.0.0-rc1, =4.0.6 Source cves: CVE-2026-40988 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKSECURITY-17315633...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), com.eurodyn.qlack.fuse:qlack-fuse-aaa (>=3.9.8, <=3.9.9) +116 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=6.0.8, <=6.5.10)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.0.8, =1.0.0.ee-20260424025040, =3.9.8, =1.6.0, =11.9.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =dce37d6e6c310e0d86c4f0d73f8846b8ef2f4432, =1.0.6, =2026.0-19, =2026.0-19, =2026.1.3 and more Source cves:...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.springframework.security:spring-security-saml2-service-provider is a security component for the Spring Framework. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the REDIRECT binding. An attacker can exhaust system...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=1.0.0-20260628114628), com.eurodyn.qlack.fuse:qlack-fuse-aaa (>=3.9.8, <=3.9.9) +116 more potentially affected by CVE-2026-41003 via org.springframework.security:spring-security-saml2-service-provider (>=6.0.8, <=6.5.10)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.0.8, =1.0.0.ee-20260424025040, =3.9.8, =1.6.0, =11.9.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =dce37d6e6c310e0d86c4f0d73f8846b8ef2f4432, =1.0.6, =2026.0-19, =2026.0-19, =2026.1.3 and more Source cves:...

Cross-site Scripting (XSS)

Overview org.springframework.security:spring-security-saml2-service-provider is a security component for the Spring Framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the RelyingPartyRegistration function. An attacker can execute arbitrary scripts in the...

ai.langsa:ccaas-starter (>=cloud-0.1, <=0.6), ai.langsa:pom-ccaas-langsa (0.1) +5275 more potentially affected by CVE-2026-41706 via org.springframework.security:spring-security-web (>=6.0.0, <=6.5.10)

org.springframework.security:spring-security-web MAVEN version =6.0.0, =cloud-0.1, =0.0.2, =0.0.2, =0.8.1, =0.0.3, =0.8.1, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

Open Redirect

Overview org.springframework.security:spring-security-web is a package within Spring Security that provides security services for the Spring IO Platform. Affected versions of this package are vulnerable to Open Redirect in the CookieRequestCache function. An attacker can redirect users to arbitra...

at.aimon.ops:aimon-ops-api (>=0.0.1, <=0.0.2), au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c, <=63.v7e87d06b_a_30c) +2284 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (>=6.4.0, <=6.4.13)

org.springframework.security:spring-security-web MAVEN version =6.4.0, =0.0.1, =55.v51410e712e0c, =1.0.1, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =1.0.18 - cc.zzzyu.nacos:nacos-ai 3.1.1 - cc.zzzyu.nacos:nacos-cmdb 3.1.1 - cc.zzzyu.nacos:nacos-config 3.1.1 - cc.zzzyu.nacos:nacos-console...

am.ik.home:uaa-client (>=1.0.0, <=1.2.0), am.ik.home:uaa-integration-test (>=1.0.0, <=1.2.0) +71 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.1.4.release)

org.springframework.security:spring-security-web MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client =1.0.0, =1.0.0, =1.0.0, =3.0.1.3,...

org.apache.syncope:syncope-core (>=1.0.9, <=1.1.8), org.springframework.security:spring-security-cas (3.1.6.release) +5 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.1.6.release)

org.springframework.security:spring-security-web MAVEN version 3.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.apache.syncope:syncope-core =1.0.9, =1.4.9, =1.4.9,...

com.github.fosin:cdp-oauth2 (1.0.0.release), com.sap.cloud.lm.sl.cf:com.sap.cloud.lm.sl.cf.client (>=1.65.4, <=1.67.1) +101 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.8.release)

org.springframework.security:spring-security-web MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.github.fosin:cdp-oauth2 1.0.0.release -...

com.allanditzel:spring-security-csrf-token-filter (1.1), com.cosmicpush:push-server (3.1.4) +55 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.2.0.release)

org.springframework.security:spring-security-web MAVEN version 3.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.allanditzel:spring-security-csrf-token-filter 1.1 -...

GHSA-293Q-567P-WMWQ Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

In Spring Security Web, SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user...

com.github.cwilper.fcrepo-cloudsync:fcrepo-cloudsync-service (>=1.0.0-beta-1, <=1.0.0), com.github.lltyk:tapestry-spring-security (>=3.0.2, <=3.0.3) +128 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.0.5.release)

org.springframework.security:spring-security-web MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: -...

org.springframework.security:spring-security-cas (3.1.5.release), org.springframework.security:spring-security-openid (3.1.5.release) +1 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (3.1.5.release)

org.springframework.security:spring-security-web MAVEN version 3.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.springframework.security:spring-security-cas...

at.researchstudio.sat:won-cryptography (0.3), at.researchstudio.sat:won-matcher (0.3) +728 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.3.release)

org.springframework.security:spring-security-web MAVEN version 4.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - at.researchstudio.sat:won-cryptography 0.3 -...

cn.bestwu:security-oauth2-authorizationserver (1.0.1), cn.dceast.platform:platform-security-starter (2.2.3) +333 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.1.3.release)

org.springframework.security:spring-security-web MAVEN version 4.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - cn.bestwu:security-oauth2-authorizationserver 1.0.1 -...

am.ik.home:uaa-client (1.9.0), am.ik.home:uaa-integration-test (1.9.0) +410 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.2.release)

org.springframework.security:spring-security-web MAVEN version 4.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - am.ik.home:uaa-client 1.9.0 -...