1038 matches found
This Week in Spring - September 1st, 2026
Hi, Spring fans! Welcome to another exciting installment of This Week in Spring! I'm writing this from lovely Oslo, Norway, for the joyous JavaZone conference. Next, I'm going to Amsterdam for the interesting IntelliJ IDEA conference, and then finally it's off to Kansas City for the kinetic KCDC...
Spring Office Hours Podcast: S5E21 - Pro Spring Boot 4 with Felipe Gutierrez
Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by returning guest Felipe Gutierrez, co-author with DaShaun of the new book "Pro Spring Boot 4: An Authoritative Guide with Best Practices" from Apress. Felipe and DaShau...
CVE-2026-41730
CVE-2026-41730...
CVE-2026-59306
CVE-2026-59306...
A Bootiful Podcast: Joe Grandja on Spring Authorization Server, OAuth, and so much more
Hi, Spring fans! In this episode, I talk Spring Security’s Joe Grandja about Spring Authorization Server’s graduation into Spring Security 7, and the new security heavyweights DPoP and PAR...
This Week in Spring - August 25th, 2026
Hi, Spring fans! Welcome back to another installment of This Week in Spring. It’s a big week ahead: I’m about to head out on a packed tour through Europe—Wrocław for a friend’s wedding, Oslo for JavaZone, Paris for a Spring meetup details coming soon, Amsterdam for IntelliJ IDEA conf—and then on ...
CVE-2014-0225
CVE-2014-0225...
CVE-2026-59316
CVE-2026-59316...
CVE-2026-59322
CVE-2026-59322...
CVE-2026-59317
CVE-2026-59317...
CVE-2026-59323
CVE-2026-59323...
CVE-2026-59324
CVE-2026-59324...
CVE-2026-59321
CVE-2026-59321...
CVE-2026-59318
CVE-2026-59318...
CVE-2026-59308
CVE-2026-59308...
CVE-2026-59319
CVE-2026-59319...
CVE-2026-59320
CVE-2026-59320...
CVE-2026-41846
CVE-2026-41846...
CVE-2026-41850
CVE-2026-41850...
CVE-2026-41847
CVE-2026-41847...
CVE-2026-41843
CVE-2026-41843...
CVE-2026-41849
CVE-2026-41849...
CVE-2026-41848
CVE-2026-41848...
CVE-2026-41845
CVE-2026-41845...
CVE-2026-41844
CVE-2026-41844...
CVE-2026-41839
CVE-2026-41839...
CVE-2026-41732
CVE-2026-41732...
CVE-2026-59315
CVE-2026-59315...
CVE-2026-59314
CVE-2026-59314...
CVE-2026-59288
CVE-2026-59288...
CVE-2026-59291
CVE-2026-59291...
CVE-2026-59294
CVE-2026-59294...
CVE-2026-59287
CVE-2026-59287...
CVE-2026-59295
CVE-2026-59295...
CVE-2026-59285
CVE-2026-59285...
CVE-2026-59292
CVE-2026-59292...
CVE-2026-59289
CVE-2026-59289...
CVE-2026-59286
CVE-2026-59286...
cve-2026-59307 - HIGH - Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference
cve-2026-59307 - HIGH - Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference...
cve-2026-59278 - MEDIUM - In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages
cve-2026-59278 - MEDIUM - In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages...
A Bootiful Podcast: JRuby lead Charles Nutter
In this episode, we sit down with the lead of the JRuby project for a fascinating look at how Ruby and the JVM came together, how JRuby became a production-ready powerhouse, and why it still matters today. We dig into threading, performance, Invoke Dynamic, Project Loom, Panama, Valhalla, and the...
cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay
cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay...
cve-2026-47837 - MEDIUM - Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests
cve-2026-47837 - MEDIUM - Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests...
cve-2026-47842 - MEDIUM - Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation
cve-2026-47842 - MEDIUM - Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation...
cve-2026-47857 - MEDIUM - Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around
cve-2026-47857 - MEDIUM - Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around...
cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File
cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File...
cve-2026-47850 - MEDIUM - Spring Data REST allows mutation of the version property of immutable aggregates via PUT
cve-2026-47850 - MEDIUM - Spring Data REST allows mutation of the version property of immutable aggregates via PUT...
cve-2026-47861 - MEDIUM - UDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when acknowledge=false
cve-2026-47861 - MEDIUM - UDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when acknowledge=false...
cve-2026-47843 - LOW - Reactor Netty may incorrectly route traffic due to DNS resolver reuse
cve-2026-47843 - LOW - Reactor Netty may incorrectly route traffic due to DNS resolver reuse...
cve-2026-47851 - HIGH - Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader
cve-2026-47851 - HIGH - Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader...