K000163050: Spring REST Docs vulnerability CVE-2026-40991

Security Advisory Description When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879243...

org.apache.camel.karaf:camel-cxf-spring-all (>=4.7.0, <=4.14.7), org.apache.camel.springboot:camel-cxf-rest-starter (>=4.0.0, <=4.14.7) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-spring-rest (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cxf-spring-rest MAVEN version =4.0.0, =4.7.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879246...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-spring-rest MAVEN version =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879246...

org.apache.camel.karaf:camel-cxf-spring-all (>=4.18.1, <=4.18.2), org.apache.camel.springboot:camel-cxf-rest-starter (>=4.15.0, <=4.18.2) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-spring-rest (>=4.15.0, <=4.18.2)

org.apache.camel:camel-cxf-spring-rest MAVEN version =4.15.0, =4.18.1, =4.15.0, =4.18.2 Source cves: CVE-2026-46592 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17879246...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:itests-cxf (>=4.0.0, <=4.14.5) +7 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cxf-rest MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =4.7.0, =4.7.0, =4.10.7, =4.0.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46592 Source advisory: GHSA-MRRP-9GJM-749V...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: OSV:GHSA-MRRP-9GJM-749V...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: GHSA-MRRP-9GJM-749V...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:itests-cxf (>=4.0.0, <=4.14.5) +7 more potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.0.0, <=4.14.7)

org.apache.camel:camel-cxf-rest MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.7.0, =4.7.0, =4.7.0, =4.10.7, =4.0.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46592 Source advisory: MEND:CVE-2026-46592...

org.apache.camel.springboot:camel-cxf-rest-starter (>=4.19.0, <=4.20.0), org.apache.camel:camel-cxf-spring-rest (>=4.19.0, <=4.20.0) potentially affected by CVE-2026-46592 via org.apache.camel:camel-cxf-rest (>=4.19.0, <=4.20.0)

org.apache.camel:camel-cxf-rest MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46592 Source advisory: MEND:CVE-2026-46592...

XXE Injection

Spring REST Docs is vulnerable to XML External Entity XXE Injection. The vulnerability is due to unsafe processing of XML content when documenting remote APIs, where a compromised or malicious API can supply crafted XML containing external entities. When documentation-generating tests are execute...

org.dspace:dspace-spring-rest (7.0-preview-1), org.springframework.boot:spring-boot-starter-data-rest (1.4.4.release) +2 more potentially affected by CVE-2026-41728 via org.springframework.data:spring-data-rest-core (2.5.7.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.dspace:dspace-spring-rest 7.0-preview-1 -...

org.dspace:dspace-spring-rest (7.0-preview-1), org.springframework.boot:spring-boot-starter-data-rest (1.4.4.release) +2 more potentially affected by CVE-2026-41729 via org.springframework.data:spring-data-rest-core (2.5.7.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.dspace:dspace-spring-rest 7.0-preview-1 -...

org.dspace:dspace-spring-rest (7.0-preview-1), org.springframework.boot:spring-boot-starter-data-rest (1.4.4.release) +2 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.5.7.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.dspace:dspace-spring-rest 7.0-preview-1 -...

GHSA-6RPQ-6VV2-5222 Spring REST Docs REST Assured & WebFlux are vulnerable to Improper Restriction of XML External Entity Reference

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next execute...

Spring REST Docs REST Assured & WebFlux are vulnerable to Improper Restriction of XML External Entity Reference

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next execute...

EUVD-2026-35885

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next execute...

CVE-2026-40991

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next execute...

PT-2026-75938

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next execute...

CVE-2026-40991: Improper Restriction of XML External Entity Reference

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next execute...