CVE-2026-59282

CVE-2026-59282 affects Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object. The root cause is unbounded list growth triggered during data binding, leading to a Denial of Service . Spring rates this as MEDIUM severi...