This Week in Spring - January 13th, 2026

Hi, Spring fans, and welcome to another installment of This Week in Spring! It's the 13th of January, 2026, and it's been quite the week indeed! Let's dive right into it! Nobody, and I mean nobody , asked. So I put together a video on how to use Spring WS to build SOAP-based services in 2026. Hey...

com.makeandbuild:persistence (=1.0.47), com.makeandbuild:propconfig (=1.0.5) +5 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-ws (=2.1.0.RELEASE)

org.springframework.ws:spring-ws MAVEN version =2.1.0.RELEASE is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-ws and may be impacted: - com.makeandbuild:persistence =1.0.47 - com.makeandbuild:propconfig =1.0.5 -...

XML External Entity Injection (XXE)

spring-ws is vulnerable to XML external entity injection XXE. The external document type definition external entities is not disabled by default and allows a remote attacker to perform XXE attacks via malicious XML data input...