2079 matches found
Deserialization Of Untrusted Data
Spring Framework is vulnerable to deserialization of untrusted data. The vulnerability is due to MappingJackson2MessageConverter and JacksonJsonMessageConverter allowing arbitrary class instantiation from untrusted JMS messages, which allows an attacker to exploit gadget classes during...
Denial Of Service
Spring Data Commons is vulnerable to Denial Of Service. The vulnerability is due to a StackOverflowException when parsing attacker-controlled Sort parameters, allowing an attacker to exhaust application resources...
CLSA-2026-1786623881 TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 9 CVEs. Fixed in 6.0.16-tuxcare.5...
CVE-Web-Framework
Web Framework CVE Vulnerability Reproduction Testbed Warn...
CLSA-2026-1786606429 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.31-tuxcare.10...
Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench
Summary Multiple vulnerabilities were addressed in IBM DevOps Solution Workbench version 5.2.1 Vulnerability Details CVEID:CVE-2026-41850 DESCRIPTION: Applications that evaluate user-supplied Spring Expression Language SpEL expressions are vulnerable to an Algorithmic Denial of Service DoS. By...
CLSA-2026-1786598361 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 3 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.6...
CLSA-2026-1786555755 TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 26 org.springframework packages to address 10 CVEs. Fixed in 6.1.7-tuxcare.2...
CLSA-2026-1786552823 TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 10 CVEs. Fixed in 5.3.7-tuxcare.5...
CLSA-2026-1786547487 TuxCare security update for org.springframework.pulsar (1 CVE)
TuxCare rebuilt 6 org.springframework.pulsar packages to address 1 CVE. Fixed in 1.2.13-tuxcare.1...
Security Bulletin:Vulnerability in Spring MVC affects IBM Netezza Appliance
Summary The Spring MVC package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41846 Vulnerability Details CVEID:CVE-2026-41846 DESCRIPTION: Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle...
Security Bulletin:Vulnerability in Spring Framework affects IBM Netezza Appliance
Summary The Spring Framework package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41845 Vulnerability Details CVEID:CVE-2026-41845 DESCRIPTION: Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape may lead to JavaScript code...
CLSA-2026-1786481559 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 22 org.springframework packages to address 1 CVE. Fixed in 5.1.9.RELEASE-tuxcare.4...
CLSA-2026-1786369191 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.6...
Security Bulletin:Vulnerability in spring affects IBM Netezza Appliance
Summary The spring package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-41848 Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to...
CLSA-2026-1786342480 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 4 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.4...
CLSA-2026-1786339580 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.24-tuxcare.5...
DoS (Denial of Service) org.springframework:spring-webmvc Dependency in Bamboo Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 12.0.0 and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to cau...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses micrometer-core-1.15.11.jar, spring-core-6.2.18.jar, spring-security-web-6.5.10.jar, spring-data-commons-3.5.11.jar, spring-webmvc-6.2.18.jar, spring-expression-6.2.18.jar and spring-security-config-6.5.10.jar which are vulnerable to CVE-2026-40983, CVE-2026-40984,...