ROOT-APP-MAVEN-CVE-2026-22754 CVE-2026-22754 in org.springframework.security:spring-security-config - Patched by Root

Root has patched CVE-2026-22754 in the org.springframework.security:spring-security-config package for Root:Maven. Multiple fixed versions available...

CVE-2026-22754

A flaw was found in Spring Security. When an application uses to define authorization rules, the servlet path may not be correctly included in the path matcher. This oversight can lead to an authorization bypass, allowing a remote attacker to access protected resources without proper authenticati...