XML External Entity (XXE) Injection

Spring Web Services is vulnerable to XML External Entity XXE Injection. The vulnerability is due to Jaxp13XPathTemplate using a code path for StreamSource and SAXSource inputs that parses attacker-controlled XML with the default DocumentBuilderFactory configuration instead of Spring's hardened XM...

Improper Security Configuration

Spring Web Services is vulnerable to Improper Security Configuration. The vulnerability is due to Wss4jSecurityInterceptor disabling WS-I Basic Security Profile BSP enforcement during inbound WS-Security validation by default, allowing SOAP messages that violate BSP security requirements to be...

Information Disclosure

Spring Web Services is vulnerable to Information Disclosure. The vulnerability is due to overly detailed authentication error handling in Spring Security integration paths, where account state information such as whether a user account is locked or disabled can be exposed through SOAP fault...

This Week in Spring - June 16th, 2026

Hi Spring fans! Welcome to another installment of This Week in Spring! I'm writing this from the oh-so-delightful and delicious! city of New Delhi, India. It's been a real privilege to come and visit so many amazing people. Last night my friend DaShaun and I presented here at the local Delhi JUG,...

Security Bulletin: MongoDB Enterprised Advanced affected by: Authentication Bypass Using an Alternate Path or Channel (CVE-2026-22731, CVE-2026-22733)

Summary There are vulnerabilities in spring-boot-actuator-autoconfigure-3.5.9.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-22731, CVE-2026-22733. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-22731 DESCRIPTION: Spring Boot applications with...

GHSA-CMWH-W62W-R2MF Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

com.alibaba.cloud.ai:spring-ai-alibaba-studio-server-admin (1.0.0.4), com.alibaba.cloud.ai:spring-ai-alibaba-studio-server-core (1.0.0.4) +2 more potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-elasticsearch-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-elasticsearch-store MAVEN version =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: OSV:GHSA-CMWH-W62W-R2MF...

Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.1.0, <=1.1.7), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: OSV:GHSA-CMWH-W62W-R2MF...

com.alibaba.cloud.ai:spring-ai-alibaba-autoconfigure-rag-elasticsearch (>=1.1.0.0-rc1, <=1.1.2.4-security-fix), com.alibaba.cloud.ai:spring-ai-alibaba-rag (>=1.1.0.0-rc1, <=1.1.2.4-security-fix) +6 more potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-elasticsearch-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-elasticsearch-store MAVEN version =1.1.0, =1.1.0.0-rc1, =1.1.0.0-rc1, =1.1.0.0-rc1, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: OSV:GHSA-CMWH-W62W-R2MF...

GHSA-26M2-9G2Q-V45Q Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service DoS condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is...

Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service DoS condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is...

EUVD-2026-36797

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service DoS condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is...

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.1.0, <=1.1.7), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: GHSA-CMWH-W62W-R2MF...

com.alibaba.cloud.ai:spring-ai-alibaba-autoconfigure-rag-elasticsearch (>=1.1.0.0-rc1, <=1.1.2.4-security-fix), com.alibaba.cloud.ai:spring-ai-alibaba-rag (>=1.1.0.0-rc1, <=1.1.2.4-security-fix) +6 more potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-elasticsearch-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-elasticsearch-store MAVEN version =1.1.0, =1.1.0.0-rc1, =1.1.0.0-rc1, =1.1.0.0-rc1, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: GHSA-CMWH-W62W-R2MF...

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.0.0, <=1.0.8), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: GHSA-CMWH-W62W-R2MF...

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.0.0, <=1.0.8), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: OSV:GHSA-CMWH-W62W-R2MF...

com.alibaba.cloud.ai:spring-ai-alibaba-studio-server-admin (1.0.0.4), com.alibaba.cloud.ai:spring-ai-alibaba-studio-server-core (1.0.0.4) +2 more potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-elasticsearch-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-elasticsearch-store MAVEN version =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: GHSA-CMWH-W62W-R2MF...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.8, <=1.0.12), cn.fscode.common:common-log-spring-boot-starter (0.0.1) +426 more potentially affected by CVE-2026-41708 via org.springframework.cloud:spring-cloud-sleuth-instrumentation (>=3.1.0, <=3.1.11)

org.springframework.cloud:spring-cloud-sleuth-instrumentation MAVEN version =3.1.0, =1.0.8, =0.0.2, =0.0.2, =1.1.0, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.6.8 and more Source cves: CVE-2026-41708 Source advisory: OSV:GHSA-26M2-9G2Q-V45Q...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.8, <=1.0.12), cn.fscode.common:common-log-spring-boot-starter (0.0.1) +426 more potentially affected by CVE-2026-41708 via org.springframework.cloud:spring-cloud-sleuth-instrumentation (>=3.1.0, <=3.1.11)

org.springframework.cloud:spring-cloud-sleuth-instrumentation MAVEN version =3.1.0, =1.0.8, =0.0.2, =0.0.2, =1.1.0, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.5.3, =4.6.8 and more Source cves: CVE-2026-41708 Source advisory: GHSA-26M2-9G2Q-V45Q...