CVE-2026-47888

Spring Framework's RSocketMessageHandler component is vulnerable to a memory leak triggered by a malformed RSocket SETUP frame . This affects Spring Framework versions 5.2.0.RELEASE through 7.0.8 across multiple major release lines. Spring rates the issue as MEDIUM severity. The connected Spring ...