org.eclipse.dirigible:dirigible-components-engine-ftp (>=12.94.0, <=13.5.0), org.springframework.cloud.fn:spring-ftp-common (6.0.0) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-ftp (7.0.4)

org.springframework.integration:spring-integration-ftp MAVEN version 7.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-ftp and may be impacted: - org.eclipse.dirigible:dirigible-components-engine-f...

com.atomikos:transactions-spring-boot4-integration-tests (6.0.1), com.devskiller.friendly-id:friendly-id-openfeign (>=2.0.0-alpha3, <=2.0.0-beta6) +9 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-artemis (>=4.0.0-m1, <=4.0.6)

org.springframework.boot:spring-boot-artemis MAVEN version =4.0.0-m1, =2.0.0-alpha3, =4.0.0-m2, =4.0.0-m2, =4.0.0-m1, =4.0.0-rc1, =4.0.0-m2, =4.0.6 - se.swedenconnect.bankid:bankid-idp 1.3.0 Source cves: CVE-2026-41001 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-18324165...

PT-2026-76011

Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloads and use the Service Provider as a decryption oracle. Affected versions: Spring Security 5.7.0...

CVE-2026-41694: Improper Verification of Cryptographic Signature

Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloads and use the Service Provider as a decryption oracle. Affected versions: Spring Security 5.7.0...

Spring Security encryption issue vulnerabilities

Spring Security is a security framework developed by Spring OpenSource that includes authentication and authorization features. Spring Security has a data manipulation vulnerability, which stems from SAML decryption of SAML responses, as well as SAML logout requests and logout responses whose...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +24927 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=3.0.0, <=3.5.14)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =3.0.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 - ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo 0.1.0 -...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0) +14811 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-autoconfigure (>=3.4.0, <=3.5.14)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =3.4.0, =0.1.0, =0.1.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2026-40992 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-17304741...

ai.platon.pulsar:browser4-boot (>=4.13.5, <=4.14.3), ai.platon.pulsar:browser4-captcha (>=4.13.5, <=4.14.3) +6758 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=4.0.0-m1, <=4.0.6)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.0.0-m1, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2, =4.14.0-rc.2, =4.5.0, =4.6.0 and more Source cves: CVE-2026-41001 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKBOOT-17308346...

ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0, <=0.3.0) +759 more potentially affected by CVE-2026-41001 via org.springframework.boot:spring-boot-autoconfigure (>=4.1.0-m1, <=4.1.0-rc1)

org.springframework.boot:spring-boot-autoconfigure MAVEN version =4.1.0-m1, =0.1.0, =0.1.0, =1.0.0-m1, =1.0.0-m1, =1.10.9, =1.10.9, =1.0.0, =1.0.2 - com.vaadin:copilot 25.2.0-beta1 - com.vaadin:hilla-endpoint 25.2.0-beta1 - com.vaadin:hilla-spring-boot-starter 25.2.0-beta1 -...

PT-2026-75958

Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests. Affected versions: Spring Data Commons 2.7.0 through 2.7.19; 3.3.0 through 3.3.16; 3.4.0 through 3.4.14; 3.5.0 through 3.5.11;...

CVE-2026-41716: Allocation of Resources Without Limits or Throttling

Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests. Affected versions: Spring Data Commons 2.7.0 through 2.7.19; 3.3.0 through 3.3.16; 3.4.0 through 3.4.14; 3.5.0 through 3.5.11;...

VMware Spring Data Commons security vulnerabilities

VMware Spring Data Commons is a data access abstraction framework developed by VMware, Inc. There is a security vulnerability in VMware Spring Data Commons. This vulnerability stems from the internal property lookup cache, which permanently retains strings provided by attackers as cache keys...

CVE-2026-41732: Deserialization of Untrusted Data

JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages rather than applying a safe default...

Directory Traversal

Overview org.springframework.integration:spring-integration-ftp is a Affected versions of this package are vulnerable to Directory Traversal. via improper validation of file paths received from FTP, SFTP, or SMB servers. A malicious or compromised server can write arbitrary files outside the...

io.camunda.connector:connector-soap (>=8.9.0-alpha3, <=8.10.0-alpha2), org.apereo.cas:cas-server-support-inwebo-mfa (>=8.0.0-rc1, <=8.0.0-rc5) potentially affected by CVE-2026-40995 via org.springframework.ws:spring-ws-security (>=5.0.0, <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =8.0.0-rc1, =8.0.0-rc5 Source cves: CVE-2026-40995 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320712...

io.camunda.connector:connector-runtime-bundle (>=8.5.0-alpha2, <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0-alpha2, <=8.9.0-alpha2) +7 more potentially affected by CVE-2026-40995 via org.springframework.ws:spring-ws-security (>=4.0.0, <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0-alpha2, =8.5.0-alpha2, =8.5.0-alpha2, =7.0.0-rc1, =5.0.0, =5.0.0, =7.0.0-rc3, =7.0.0-rc3, =7.1.6.2 Source cves: CVE-2026-40995 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKWS-17320712...

PT-2026-75993

Correlation IDs for replies in the RabbitTemplate.sendAndReceive with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17...

PT-2026-75936

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

PT-2026-75994

Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals to HTTP clients. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0 through 4.5.11; 5.0.0 through...

VMware Spring Data REST security vulnerabilities

VMware Spring Data REST is a data interface provided by the American company VMware. It is used to build HTTP resources that drive hypermedia, based on Spring Data repositories. These resources are designed to manage domain models of applications and provide hypermedia-driven services for...