Improper Handling Of Untrusted Message Headers

Spring Integration is vulnerable to improper handling of untrusted message headers. The vulnerability is due to the EmbeddedHeadersJsonMessageMapper deserializing embedded JSON headers into a Map and creating message headers without sanitizing or filtering untrusted header names by default, which...

Denial Of Service

Spring Integration is vulnerable to Denial of Service. The vulnerability is due to the UnZipTransformer not limiting decompressed entry size or entry count when processing archives, where an attacker can send a crafted zip archive that exhausts JVM heap memory and causes a denial-of-service outag...

Open Redirect

Spring Authorization Server is vulnerable to open redirect. The vulnerability is due to insufficient validation of the requesturi parameter, where the authorization endpoint allows an attacker to craft a request containing an invalid requesturi paired with an unvalidated redirecturi, resulting in...

Improper Input Validation

Spring for Apache Kafka is vulnerable to an integer parsing denial-of-service. The vulnerability is due to the application passing attacker-controlled header bytes directly to BigInteger without length or format validation, which allows an attacker to exploit the issue by supplying a maliciously...

Denial-of-Service (DoS)

Spring Cloud Config is vulnerable to a Denial-of-Service DoS. The vulnerability is due to the Spring Cloud Config Monitor processing maliciously crafted payloads, which allows an attacker to send specially crafted requests that can exhaust application resources and cause the affected service to...

Deserialization Protection Bypass

org.springframework.integration, spring-integration-jdbc is vulnerable to a deserialization protection bypass. The vulnerability is due to JdbcMessageStore.addAllowedPatterns... providing no effective protection when the store is configured as a Spring-managed bean, which allows an attacker to...

RediSearch Injection

Spring AI is vulnerable to RediSearch Injection. The vulnerability is due to RedisChatMemoryRepository.findByMetadata using unsanitized metadata values in RediSearch queries, allowing an attacker to inject RediSearch syntax and retrieve chat messages across conversations...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.3.25 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.2.31 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the AadOidcIdTokenDecoderFactory and AadB2cOidcIdTokenDecoderFactory OIDC ID token decoders in the Spring Cloud Azure OAuth2 login components. An attacker can elevate privileges and sign in as an...

CVE-2026-69854

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-59324

A flaw was found in Spring Integration. When an IntegrationFlow uses .fluxTransform with an asynchronous fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel subscription can have their reply headers copied from other messages. This information disclosure...

CVE-2026-47864

A flaw was found in Spring Integration. The SerializingHttpMessageConverter component deserializes incoming HTTP request bodies without proper class filtering. A remote, unauthenticated attacker can exploit this by sending a specially crafted HTTP request. If a known Java deserialization 'gadget'...

CVE-2026-69854

CVE-2026-69854 is an improper authentication vulnerability in Spring Cloud Azure that allows an unauthorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 9.0 (CRITICAL) with a changed scope , reflecting high impact on confidentiality, integrity,...

EUVD-2026-73791

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...

Deserialization Of Untrusted Data

Spring for Apache Kafka is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper trusting java.net packages by default, which allows an external Kafka producer to inject malicious java.net.InetAddress types through the...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.5.19 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.43 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

Denial Of Service (DoS)

Spring AMQP is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of a malicious AMQP message that can terminate the entire consumer JVM using System.exit99, which allows an attacker to cause complete availability loss for all workloads running in the affected...