3 matches found
Spring Framework 6.1.x < 6.1.29 / 6.2.x < 6.2.20 / 7.0.x < 7.0.8.1 maxPartSize Ignored in PartEventHttpMessageReader
The version of Spring Framework installed on the remote host is 6.1.x prior to 6.1.29, 6.2.x prior to 6.2.20, or 7.0.x prior to 7.0.8.1. It is, therefore, affected by a vulnerability: - The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is...
ai.astraform:remote-domain-author-kit-java (0.2.0), ai.astraform:remote-domain-conformance-java (0.2.0) +6813 more potentially affected by CVE-2026-47885 via org.springframework:spring-web (>=7.0.0, <=7.0.8)
org.springframework:spring-web MAVEN version =7.0.0, =0.1.0, =0.0.1, =0.0.1, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =0.1.0, =0.1.0, =1.8.1 and more Source cves: CVE-2026-47885 Source advisory: MEND:CVE-2026-47885...
