CVE-2022-22978

CVE-2022-22978 Spring-Security bypass Demo When using RegexRequestMatcher in Spring Security and the regex rule contains a dot ., an attacker can bypass authentication by crafting a malicious packet. Affected Range Spring Security 5.5.x Spring Security 5.6.x http://localhost:8080/admin/index%0a...

Incorrect Authorization

Clerk is vulnerable to Incorrect Authorization. The vulnerability is due to improper request matching in createRouteMatcher, which allows an attacker to craft requests that bypass middleware protection and access downstream handlers...

Improper Access Control

Spring Security is vulnerable to Improper Access Control. The vulnerability is due to incorrect request matching when using securityMatchersString with a PathPatternRequestMatcher.Builder that prepends a servlet path, causing requests to bypass the intended filter chain and leaving authentication...

CVE-2026-25882: Improper Validation of Array Index

Fiber is an Express inspired web framework written in Go. A denial of service vulnerability exists in Fiber v2 and v3 that allows remote attackers to crash the application by sending requests to routes with more than 30 parameters. The vulnerability results from missing validation during route...