EUVD-2026-35342

Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

EUVD-2026-35330

Spring MVC and WebFlux applications are vulnerable to Denial of Service DoS attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

CVE-2026-41842 Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux

Spring MVC and WebFlux applications are vulnerable to Denial of Service DoS attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

CVE-2026-41842

The CVE-2026-41842 entry affects Spring Framework in Spring MVC and WebFlux, reporting a Denial of Service (DoS) when resolving static resources. Affected versions are Spring Framework 7.0.0–7.0.7; 6.2.0–6.2.18; 6.1.0–6.1.27; 5.3.0–5.3.48. The description in both records states the DoS vulnerabil...

UBUNTU-CVE-2026-41842

Spring MVC and WebFlux applications are vulnerable to Denial of Service DoS attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

Silent Ransom Group Uses Fast Flux Botnet to Hide Law Firm Leak Sites

Cybersecurity firm Resecurity reports Silent Ransom Group is using a fast flux botnet to hide data leak sites while targeting law firms with theft and vishing...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

CVE-2026-42502 vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: kots, cilium, caddy, kubernetes-dashboard, argo-cd, gptscript, kine, zot, gitea, minio, glab, nerdctl, terraform-provider-acme, crossplane-provider-azure-storage, kubernetes, crossplane-provider-aws-elasticache, step-issuer, snyk-cli, fq, grafana-pyroscope,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: trufflehog, steampipe, pulumi-language-yaml, kots, wolfictl, tfsec, bom, pulumi-language-java, grafana-alloy, argo-cd, gptscript, act, external-secrets-operator, gitaly, nfpm, gitlab-runner, gitsign, kubevela, gitea, src-fingerprint, xeol, skaffold, zot, nuclei,...