ROOT-APP-MAVEN-CVE-2026-22753 CVE-2026-22753 in org.springframework.security:spring-security-config - Patched by Root

Root has patched CVE-2026-22753 in the org.springframework.security:spring-security-config package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22754 CVE-2026-22754 in org.springframework.security:spring-security-config - Patched by Root

Root has patched CVE-2026-22754 in the org.springframework.security:spring-security-config package for Root:Maven. Multiple fixed versions available...

CVE-2026-89054

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

EUVD-2026-75707

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

RHLW-2026-8FD370B9B3E9924A Lightwell Security Advisory: spring-security-core 6.5.7.rhlw-00002

Red Hat Lightwell has released org.springframework.security:spring-security-core 6.5.7.rhlw-00002 with backported fixes for CVE-2026-22746 and CVE-2026-22751. CVE-2026-22746: User Attribute Enumeration when Using DaoAuthenticationProvider CVE-2026-22751: Spring Security JdbcOneTimeTokenService...

Improper Authentication

Spring Security is vulnerable to Improper Authentication. The vulnerability is due to user verification state not being properly maintained with a distributed HTTP session store, allowing an attacker to bypass WebAuthn user verification...

CLEANSTART-2026-GZ54612 In Spring Security, versions 5

Multiple security vulnerabilities affect the apache-nifi package. In Spring Security, versions 5. See references for individual vulnerability details...

CLSA-2026-1788874294 TuxCare security update for org.springframework.security:spring-security-oauth2-authorization-server (1 CVE)

TuxCare rebuilt org.springframework.security:spring-security-oauth2-authorization-server to address 1 CVE. Fixed in 1.5.8-tuxcare.1...

Timing Attack

Spring Security is vulnerable to a timing attack. The vulnerability is due to the use of String.equals, which returns early when a character differs, causing response times to vary based on the number of matching leading characters and allowing an attacker to perform timing analysis to...

UnboundID LDAP Server Administrative Credential Exposure

Spring Security is vulnerable to an UnboundID LDAP Server Administrative Credential Exposure. The vulnerability is due to the embedded UnboundID LDAP server UnboundIdContainer unconditionally registering an administrative credential and binding its listener to all available network interfaces,...

Cross-Site Scripting (XSS)

org.springframework.security, spring-security-oauth2-authorization-server is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the default consent page rendering user-controlled values without proper HTML entity encoding, which allows an attacker to inject malicious HTML or...

Use Of A Broken Or Risky Cryptographic Algorithm

Spring Security is vulnerable to Use of a Broken or Risky Cryptographic Algorithm. The vulnerability is due to AesBytesEncryptor using AES/CBC with a null all-zero initialization vector, which allows an attacker to exploit predictable encryption and potentially infer relationships between encrypt...

CLSA-2026-1788528946 TuxCare security update for org.springframework.security:spring-security-oauth2-authorization-server (1 CVE)

TuxCare rebuilt org.springframework.security:spring-security-oauth2-authorization-server to address 1 CVE. Fixed in 1.3.7-tuxcare.6...

IP Address Disclosure

Spring Security is vulnerable to IP address disclosure. The vulnerability is due to improper IP classification logic in the InetAddressMatchers utility, where the matchInternal and matchExternal builders can be manipulated to incorrectly classify private IP addresses as public, allowing an attack...

Replay Attack

Spring Security is vulnerable to Replay Attack. The vulnerability is due to a strict size limit on the cache storing JWT ID claims, which allows an attacker to evict legitimate entries by flooding the server with dummy requests and subsequently replay intercepted valid DPoP proofs...

CVE-2026-80515

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whether to apply its check by calling request.getRequestURL.toString.contains"/mgmt/". Tomcat returns getRequestURL un-decoded, while Spring MVC's...

PT-2026-85026

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whether to apply its check by calling request.getRequestURL.toString.contains"/mgmt/". Tomcat returns getRequestURL un-decoded, while Spring MVC's...

CVE-2026-59276

Several components in Spring Security compare security-sensitive values using standard string equality String.equals rather than a constant-time comparison. Because String.equals returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the...

CVE-2026-59277

Spring Security InetAddressMatchers utility provides matchInternal and matchExternal builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal private or external public network. In Spring Security 7.1.0, the internal address classification did...

CLSA-2026-1788340467 TuxCare security update for org.springframework.security:spring-security-saml2-service-provider (2 CVEs)

TuxCare rebuilt org.springframework.security:spring-security-saml2-service-provider to address 2 CVEs. Fixed in 6.1.6-tuxcare.6...