2737 matches found
Open Redirect
Spring Framework is vulnerable to Open Redirect. The vulnerability is due to improper handling of URLs by UrlFileNameViewController when mapped with an end-of-path and no configured prefix, which allows an attacker to craft a malicious URL that redirects users to an attacker-controlled external...
CVE-2026-47892
A flaw was found in Spring Framework. This vulnerability allows a header predicate bypass to occur in a pre-flight request within a WebFlux application that uses functional endpoints and is deployed with DispatcherServlet. This bypass could potentially lead to unexpected behavior or security poli...
CLSA-2026-1788871245 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.31-tuxcare.14...
Denial Of Service (DoS)
Spring Framework is vulnerable to Denial of Service DoS. The vulnerability is due to inefficient processing of the SpEL power operator ^ with BigDecimal or BigInteger operands and large exponent values, which allows an attacker to supply a crafted expression that consumes excessive CPU and memory...
CLSA-2026-1788869692 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.37-tuxcare.11...
CLSA-2026-1788865685 TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5...
Denial Of Service (DoS)
Spring Framework is vulnerable to Denial Of Service. The vulnerability is due to stream corruption when Server-Sent Events SSE are used with functional web framework applications in Spring MVC...
CLSA-2026-1788813738 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 8 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.5...
CLSA-2026-1788807216 TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 11 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.5...
CLSA-2026-1788804848 TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 14 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.6...
CLSA-2026-1788800921 TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.29-tuxcare.10...
CLSA-2026-1788800102 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.21-tuxcare.2...
Stream Corruption
Spring Framework is vulnerable to stream corruption. The vulnerability is due to improper handling of response streams when processing SSE with view fragments, which allows an attacker to potentially corrupt or disrupt the application’s HTTP response stream...
Open Redirect
Spring Framework is vulnerable to an open redirect. The vulnerability is due to insufficiently restrictive URL pattern matching, which allows an attacker to manipulate a URL and redirect a victim to an attacker-controlled external destination...
CLSA-2026-1788782570 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 4 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.11...
CLSA-2026-1788782067 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.16-tuxcare.5...
CLSA-2026-1788547257 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.0.11-tuxcare.4...
CLSA-2026-1788547255 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.16-tuxcare.4...