2738 matches found
Denial Of Service
Spring Data Commons is vulnerable to Denial Of Service. The vulnerability is due to a StackOverflowException when parsing attacker-controlled Sort parameters, allowing an attacker to exhaust application resources...
CLSA-2026-1786623881 TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 9 CVEs. Fixed in 6.0.16-tuxcare.5...
CVE-Web-Framework
Web Framework CVE Vulnerability Reproduction Testbed Warn...
CLSA-2026-1786606429 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.31-tuxcare.10...
Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench
Summary Multiple vulnerabilities were addressed in IBM DevOps Solution Workbench version 5.2.1 Vulnerability Details CVEID:CVE-2026-41850 DESCRIPTION: Applications that evaluate user-supplied Spring Expression Language SpEL expressions are vulnerable to an Algorithmic Denial of Service DoS. By...
CLSA-2026-1786599882 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.15-tuxcare.3...
CLSA-2026-1786598361 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 3 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.6...
CLSA-2026-1786555755 TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 26 org.springframework packages to address 10 CVEs. Fixed in 6.1.7-tuxcare.2...
CLSA-2026-1786552823 TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 10 CVEs. Fixed in 5.3.7-tuxcare.5...
CLSA-2026-1786547487 TuxCare security update for org.springframework.pulsar (3 CVEs)
TuxCare rebuilt 6 org.springframework.pulsar packages to address 3 CVEs. Fixed in 1.2.13-tuxcare.1...
CLSA-2026-1786543288 TuxCare security update for org.springframework.ws (2 CVEs)
TuxCare rebuilt 6 org.springframework.ws packages to address 2 CVEs. Fixed in 3.1.6-tuxcare.1...
Security Bulletin:Vulnerability in Spring Framework affects IBM Netezza Appliance
Summary The Spring Framework package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41854 Vulnerability Details CVEID:CVE-2026-41854 DESCRIPTION: Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate ...
Security Bulletin:Vulnerability in Spring MVC affects IBM Netezza Appliance
Summary The Spring MVC package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41846 Vulnerability Details CVEID:CVE-2026-41846 DESCRIPTION: Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle...
Security Bulletin:Vulnerability in Spring Framework affects IBM Netezza Appliance
Summary The Spring Framework package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41845 Vulnerability Details CVEID:CVE-2026-41845 DESCRIPTION: Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape may lead to JavaScript code...
Security Bulletin:Vulnerability in Spring MVC and WebFlux affects IBM Netezza Appliance
Summary The Spring MVC and WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41844 Vulnerability Details CVEID:CVE-2026-41844 DESCRIPTION: A Spring MVC or Spring WebFlux application which configures a mapping for "/" where the view...
Security Bulletin:Vulnerability in Spring MVC and WebFlux affects IBM Netezza Appliance
Summary The Spring MVC and WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41843 Vulnerability Details CVEID:CVE-2026-41843 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving...
Security Bulletin:Vulnerability in Spring MVC and WebFlux affects IBM Netezza Appliance
Summary The Spring MVC and WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41841 Vulnerability Details CVEID:CVE-2026-41841 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when...
CLSA-2026-1786481559 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 22 org.springframework packages to address 1 CVE. Fixed in 5.1.9.RELEASE-tuxcare.4...