CVE-2026-47886

Applications evaluating user-supplied Spring Expression Language (SpEL) expressions are vulnerable to a Denial of Service (DoS) attack. This occurs when the power operator (^) is used with a BigDecimal or BigInteger operand paired with a large exponent value. Affected versions include Spring Fram...