CVE-2026-41707

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries ...

be.appify.prefab:prefab-security (>=0.2.0, <=0.10.9), br.com.sawcunhaos:scos-foundation-security (1.1.0) +606 more potentially affected by CVE-2026-41707 via org.springframework.security:spring-security-oauth2-jose (>=7.0.0, <=7.0.6)

org.springframework.security:spring-security-oauth2-jose MAVEN version =7.0.0, =0.2.0, =5.0.0, =5.0.0, =5.0.0, =7.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =4.0.0-alpha-springboot4, =4.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =2.0.0-alpha-springboot4, =4.0.0-alpha-springboot4,...

CVE-2026-41707 Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries ...

be.appify.prefab:prefab-security (>=0.11.0, <=0.12.0), build.jenesis:build.jenesis.repository.bundle (>=0.1.0, <=0.7.0) +426 more potentially affected by CVE-2026-41707 via org.springframework.security:spring-security-oauth2-jose (7.1.0)

org.springframework.security:spring-security-oauth2-jose MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-jose and may be impacted: - be.appify.prefab:prefab-security =0.11.0, =0.1....

CVE-2026-41707

Spring Security 's DPoPProofJwtDecoderFactory is vulnerable to a cache-based replay attack . The internal cache that stores JWT ID claims has a strict size limit, which an attacker can exploit by flooding the server with dummy requests to evict legitimate entries, then replaying intercepted valid...

CVE-2026-41707 Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries ...

CVE-2026-41707 Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries ...

CLSA-2026-1787661459 TuxCare security update for org.springframework.security (1 CVE)

TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.7.12-tuxcare.8...

CLSA-2026-1787649513 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 18 org.springframework.security packages to address 2 CVEs. Fixed in 6.0.8-tuxcare.2...

CVE-2026-41707: Authentication Bypass by Capture-replay

Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries ...

PT-2026-81899

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11 Description An authentication bypass issue exists in the DPoPProofJwtDecoderFactory due to a cache-based replay attack. Th...

org.apache.camel.springboot:camel-undertow-spring-security-starter (>=4.19.0, <=4.21.0), org.apache.camel.springboot:camel-undertow-starter (>=4.19.0, <=4.21.0) +2 more potentially affected by CVE-2026-78329 via org.apache.camel:camel-undertow (>=4.19.0, <=4.21.0)

org.apache.camel:camel-undertow MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.21.0 Source cves: CVE-2026-78329 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-19319259...

org.apache.camel.springboot:camel-undertow-spring-security-starter (>=4.19.0, <=4.21.0), org.apache.camel.springboot:camel-undertow-starter (>=4.19.0, <=4.21.0) +2 more potentially affected by CVE-2026-78329 via org.apache.camel:camel-undertow (>=4.19.0, <=4.21.0)

org.apache.camel:camel-undertow MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.21.0 Source cves: CVE-2026-78329 Source advisory: OSV:GHSA-V7H8-XHH6-GFJ4...

org.apache.camel.springboot:camel-undertow-spring-security-starter (>=4.19.0, <=4.21.0), org.apache.camel.springboot:camel-undertow-starter (>=4.19.0, <=4.21.0) +2 more potentially affected by CVE-2026-78329 via org.apache.camel:camel-undertow (>=4.19.0, <=4.21.0)

org.apache.camel:camel-undertow MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.21.0 Source cves: CVE-2026-78329 Source advisory: GHSA-V7H8-XHH6-GFJ4...

org.apache.camel.springboot:camel-undertow-spring-security-starter (>=4.19.0, <=4.21.0), org.apache.camel.springboot:camel-undertow-starter (>=4.19.0, <=4.21.0) +2 more potentially affected by CVE-2026-78329 via org.apache.camel:camel-undertow (>=4.19.0, <=4.21.0)

org.apache.camel:camel-undertow MAVEN version =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.19.0, =4.21.0 Source cves: CVE-2026-78329 Source advisory: MEND:CVE-2026-78329...

CLSA-2026-1787323603 TuxCare security update for org.springframework.security (3 CVEs)

TuxCare rebuilt 19 org.springframework.security packages to address 3 CVEs. Fixed in 6.2.2-tuxcare.4...

Comparison of Object References Instead of Object Contents

Overview Affected versions of this package are vulnerable to Comparison of Object References Instead of Object Contents in the process of comparing UserVerificationRequirement during WebAuthn authentication, when using distributed HTTP session stores. An attacker can bypass user verification by...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +12117 more potentially affected by CVE-2026-47842 via org.springframework.security:spring-security-crypto (>=5.7.0, <=7.0.6)

org.springframework.security:spring-security-crypto MAVEN version =5.7.0, =0.2.0, =0.5.0, =0.6.0, =0.5.0, =0.8.4, =0.8.4, =0.9.1, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.8.4, =0.9.2 and more Source cves: CVE-2026-47842 Source advisory:...

ai.langsa:ccaas-starter (>=cloud-0.1, <=0.6), ai.langsa:pom-ccaas-langsa (0.1) +8385 more potentially affected by CVE-2026-59276 via org.springframework.security:spring-security-core (>=5.7.0, <=7.0.6)

org.springframework.security:spring-security-core MAVEN version =5.7.0, =cloud-0.1, =0.0.2, =0.0.2, =0.8.1, =0.0.3, =0.8.1, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040, =1.0.0.ee-20260424025040,...

cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay

cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay...