CVE-2026-47891

CVE-2026-47891 affects Spring WebFlux applications that use the Aalto XML processor to parse XML input, where the maxInMemorySize limit is not correctly enforced. The vulnerability resides specifically in the Jaxb2Decoder component, as identified in the Spring advisory, and is rated MEDIUM severi...