CVE-2026-47887

Spring Framework is vulnerable to an open redirect when a UrlFileNameViewController is mapped with an end-of-path and no prefix is configured. The Spring advisory rates this as MEDIUM severity. Affected versions span multiple release lines: 7.0.0–7.0.8 , 6.2.0–6.2.19 , 6.1.0–6.1.28 , 6.0.0–6.0.30...