CVE-2026-47886

Spring Framework versions 5.2.25.RELEASE through 7.0.8 are affected by a Denial of Service (DoS) vulnerability in the Spring Expression Language (SpEL) evaluator. The root cause is unbounded exponentiation when the power operator (^) is used with a BigDecimal or BigInteger operand and a large exp...