Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.43 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

Denial Of Service (DoS)

Spring AMQP is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of a malicious AMQP message that can terminate the entire consumer JVM using System.exit99, which allows an attacker to cause complete availability loss for all workloads running in the affected...

Directory Traversal

Spring Cloud Config is vulnerable to Directory Traversal. The vulnerability is due to improper restriction of configuration file access in the native environment repository, which allows an attacker to access configuration files outside the configured repository path...

Spring Cloud Azure Elevation of Privilege Vulnerability

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

CLSA-2026-1788874294 TuxCare security update for org.springframework.security:spring-security-oauth2-authorization-server (1 CVE)

TuxCare rebuilt org.springframework.security:spring-security-oauth2-authorization-server to address 1 CVE. Fixed in 1.5.8-tuxcare.1...

CLSA-2026-1788873403 TuxCare security update for org.springframework.graphql (5 CVEs)

TuxCare rebuilt 2 org.springframework.graphql packages to address 5 CVEs. Fixed in 1.2.9-tuxcare.5...

Denial Of Service (DoS)

Spring Framework is vulnerable to Denial Of Service DoS. The vulnerability is due to the Aalto XML processor not correctly enforcing the maxInMemorySize limit when parsing XML input, which allows an attacker to provide oversized XML data that consumes excessive memory and potentially causes a...

Open Redirect

Spring Framework is vulnerable to Open Redirect. The vulnerability is due to improper handling of URLs by UrlFileNameViewController when mapped with an end-of-path and no configured prefix, which allows an attacker to craft a malicious URL that redirects users to an attacker-controlled external...

CVE-2026-47892

A flaw was found in Spring Framework. This vulnerability allows a header predicate bypass to occur in a pre-flight request within a WebFlux application that uses functional endpoints and is deployed with DispatcherServlet. This bypass could potentially lead to unexpected behavior or security poli...

CLSA-2026-1788871245 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.31-tuxcare.14...

Denial Of Service (DoS)

Spring Framework is vulnerable to Denial of Service DoS. The vulnerability is due to inefficient processing of the SpEL power operator ^ with BigDecimal or BigInteger operands and large exponent values, which allows an attacker to supply a crafted expression that consumes excessive CPU and memory...

CLSA-2026-1788870312 TuxCare security update for org.springframework.graphql:spring-graphql (5 CVEs)

TuxCare rebuilt org.springframework.graphql:spring-graphql to address 5 CVEs. Fixed in 1.3.5-tuxcare.3...

Authorization Bypass

Spring Integration is vulnerable to Authorization Bypass. The vulnerability is due to JMS properties such as replyChannel, errorChannel, and jsonTypeId being copied without validation into Spring Integration MessageHeaders, which allows an attacker with JMS publish access to manipulate message...

CVE-2026-47884

A flaw was found in the XsltView component of Spring MVC applications. This vulnerability could allow a remote, unauthenticated attacker to perform Server-Side Request Forgery SSRF, enabling them to make unauthorized requests from the server, and potentially achieve Remote Code Execution RCE,...

CLSA-2026-1788869692 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.37-tuxcare.11...

Server-Side Request Forgery (SSRF)

Spring Cloud Gateway is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to JsonToGrpcGatewayFilterFactory allowing arbitrary Spring Resource locations for the proto descriptor, which allows an attacker to access or load unintended resources from the server...

Deserialization Of Untrusted Data

Spring Batch is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to DefaultExecutionContextSerializer passing Base64-decoded data directly to ObjectInputStream.readObject without an ObjectInputFilter, which allows an attacker to provide malicious serialized objects and...

CLSA-2026-1788865685 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5...

Sensitive Data Exposure

org.springframework.cloud, spring-cloud-function-adapter-aws is vulnerable to sensitive data exposure. The vulnerability is due to sensitive information being included in application logs, which allows an attacker with access to the logs to obtain potentially confidential data...

Denial Of Service (DoS)

Spring Framework is vulnerable to Denial Of Service. The vulnerability is due to stream corruption when Server-Sent Events SSE are used with functional web framework applications in Spring MVC...