ai.authplane.sdk:authplane-spring (>=0.1.0, <=0.3.0), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +29 more potentially affected by CVE-2026-59279 via org.springframework.ai:mcp-spring-webmvc (2.0.0)

org.springframework.ai:mcp-spring-webmvc MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ai:mcp-spring-webmvc and may be impacted: - ai.authplane.sdk:authplane-spring =0.1.0, =0.0.1, =0.0.1, =0.0.5, =1.5.0, =1.5....

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through unbounded session retention in the handleInitRequest path of WebFluxStreamableServerTransportProvider and WebMvcStreamableServerTransportProvider. An unauthenticated remote...

ai.authplane.sdk:authplane-spring (>=0.1.0, <=0.3.0), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +29 more potentially affected by CVE-2026-59279 via org.springframework.ai:mcp-spring-webmvc (2.0.0)

org.springframework.ai:mcp-spring-webmvc MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ai:mcp-spring-webmvc and may be impacted: - ai.authplane.sdk:authplane-spring =0.1.0, =0.0.1, =0.0.1, =0.0.5, =1.5.0, =1.5....