Lucene search
+L
SpringMost viewed

1048 matches found

Spring Security Advisories
Spring Security Advisories
added 2025/10/14 12:00 a.m.15 views

Spring Session MongoDB: Now Led by MongoDB Team

It gives me great pleasure to announce that the Spring Session MongoDB project will now be led by the MongoDB Team. NOTE: This announcement is in alignment with our announcement Spring Session Hazelcast: Now Led by Hazelcast Team. For ten years Spring Session has provided the infrastructure for...

6.7AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/10/09 12:00 a.m.15 views

A Bootiful Podcast: Spring Security contributor Josh Cummings on the latest-and-greatest in Spring Security 7

Hi, Spring fans! In this installment we talk to Spring Security contributor and legend Josh Cummings...

6.9AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/09/09 12:00 a.m.15 views

Core Spring Resilience Features: @ConcurrencyLimit, @Retryable, and RetryTemplate

This is the first blog post in the Road to GA series, highlighting major features within the Spring portfolio for the next major versions to be released in November of this year. Today we are proud to announce the new resilience features coming in Spring Framework 7.0: concurrency throttling and...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/05/15 12:00 a.m.15 views

A Bootiful Podcast: Donald Raab on Eclipse Collections

Hi, Spring fans! In this edition, we talk to Eclipse Collections founder Donald Raab...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/05/01 12:00 a.m.15 views

A Bootiful Podcast: Spring instructor Mary Ellen Bowman

Hi, Spring fans! In this installment I talk to Mary Ellen Bowman, a legendary Spring instructor!...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/03/13 12:00 a.m.15 views

A Bootiful Podcast: Jonatan Ivanov, observability legend on the Micrometer team

Hi, Spring fans! In this installment we talk to one of the Willy Wonka's of observability, the amazing Jonatan Ivanov! This episode was recorded at ConFoo 2025...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/02/13 12:00 a.m.15 views

A Bootiful Podcast: Spring Boot and Spring Initializr legend Moritz Halbritter

Hi, Spring fans! In this installment I talk to Spring Boot and Spring Initializr legend Moritz Halbritter...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/01/21 12:00 a.m.15 views

Building Effective Agents with Spring AI (Part 1)

In a recent research publication: Building effective agents, Anthropic shared valuable insights about building effective Large Language Model LLM agents. What makes this research particularly interesting is its emphasis on simplicity and composability over complex frameworks. Let's explore how...

7.5AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/12/10 12:00 a.m.15 views

This Week in Spring - December 10th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! As I write this I am in the southern hemisphere it's summer down here!, in Brisbane, waiting to board a plane for Sydney. It's been a ton of fun! I did a video looking at the latest-and-greatest in Spring Framework 6.2 - chec...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/12/03 12:00 a.m.15 views

Extending Spring Data Repositories Just Got Easier

Since its inception, Spring Data Repositories have been designed for extension, whether you want to customize a single query method or provide a completely new base implementation. The 2024.1 release enhances your ability to extend a repository with custom functionality making it easier than ever...

6.9AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/10/24 12:00 a.m.15 views

A Bootiful Podcast: GraalVM founder and BDFL Thomas Wuerthinger on GraalPy, GraalVM, and so much more

Hi, Spring fans! In this installment I talk to GraalVM founder and benevolent dictator for life Thomas Wuerthinger, recorded live from Devoxx Belgium 2024!...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/10/10 12:00 a.m.15 views

A Bootiful Podcast: New York Java SIG chair and founder Frank Greco on community, AI, and more

Hi, Spring fans! In this installment, I talk to New York Java SIG chair and founder Frank Greco about AI, safety, Java, community, and more!...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/09/26 12:00 a.m.15 views

A Bootiful Podcast: Oracle Java Developer Advocate Billy Korando on Java 23, Structured Concurrency, and more

Hi, Spring fans! In this installment I talk to Java Developer advocate at Oracle, Billy Korando, about the amazing new features in Java 23 and beyond!...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/03/07 12:00 a.m.15 views

A Bootiful Podcast: Cristian Schuszter on CERN

Hi, Spring fans! In this installment I talk to Cristian Schuszter, a software engineer at CERN. This episode was recorded live at VOXXED DAYS CERN!. Don't forget to help us out with the State of Spring Survey...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/02/29 12:00 a.m.15 views

A Bootiful Podcast: Roni Dover on Digma AI

Hi, Spring fans! In this installment we talk to Digma AI founder Roni Dover...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/02/15 12:00 a.m.15 views

A Bootiful Podcast: Oracle Java Developer Advocate Nicolai Parlog on the latest and greatest in Java

Hi, Spring fans! In this installment, I talk to Oracle Java Developer Advocate Nicolai Parlog on the latest and greatest in Java...

6.9AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/01/30 12:00 a.m.15 views

Spring Tips: easy CQRS with Axon Framework

Hi, Spring fans! In this installment I'm joined by Axon Framework founder Allard Buijze and we look at the new integrations for Spring Boot developers in Axon Framework and AxonIQ Server. Special thanks to AxonIQ for the keynote video replay. Check out for more great stuff! java java21 axon...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/11/27 12:00 a.m.15 views

Reactor Netty HTTP Server Metrics DoS Vulnerability

In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable if Reactor Netty HTTP Server built-in...

5.3CVSS6.6AI score0.00914EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2023/11/09 12:00 a.m.15 views

A Bootiful Podcast: Azul Deputy CTO Simon Ritter

Hi, Spring fans! In this week's installment I talk to Azul Deputy CTO Simon Ritter @speakjava, recorded live at Devoxx Belgium 2023!...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/10/12 12:00 a.m.15 views

A Bootiful Podcast: Java Language Architect Brian Goetz

Hi, Spring fans! Are you using Java 21 in production already? No? you should listen to this episode. Yes? Then you should listen to this episode! This week, Josh Long talks to legendary Java Language Architect Brian Goetz @BrianGoetz recaping the latest-and-greatest and previewing Java.next...

6.9AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/01/17 12:00 a.m.15 views

This Week in Spring - January 17th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! I went to Helsinki, Finland, last week, and this week I'm in Atlanta, Georgia, to speak at the Atlanta Java User Group. And, of course, next week, I'll be in New York to join a viewing party for the airing of SpringOne...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2022/03/01 12:00 a.m.15 views

Spring Cloud Gateway HTTP2 Insecure TrustManager

Applications using Spring Cloud Gateway that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or custom certificates...

5.5CVSS7.2AI score0.04846EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2021/10/26 12:00 a.m.15 views

Potential Security Bypass for customized Spring Data REST Resource

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

5.3CVSS6.1AI score0.00771EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2020/08/04 12:00 a.m.15 views

Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard

Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can...

6.5CVSS5.8AI score0.10214EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2020/02/27 12:00 a.m.15 views

DoS Via Malformed URL with Reactor Netty HTTP Server

Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response...

7.5CVSS6.7AI score0.01146EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2019/10/11 12:00 a.m.15 views

Reactor Netty authentication leak in redirects

Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to...

8.6CVSS6.9AI score0.00894EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2026/08/22 5:40 p.m.14 views

CVE-2026-59314

CVE-2026-59314...

5.2AI score0.00198EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/22 9:39 a.m.14 views

CVE-2026-59295

CVE-2026-59295...

5.2AI score0.00222EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.14 views

cve-2026-47875 - MEDIUM - JobParameterDeserializer bypasses the trusted-type allowlist

cve-2026-47875 - MEDIUM - JobParameterDeserializer bypasses the trusted-type allowlist...

9.8CVSS5.3AI score0.00292EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.14 views

cve-2026-59279 - HIGH - Unbounded persistent session allocation via repeated initialize requests

cve-2026-59279 - HIGH - Unbounded persistent session allocation via repeated initialize requests...

7.5CVSS5.1AI score0.00386EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.14 views

cve-2026-47849 - HIGH - Spring Data REST allows mutation of identifier and version properties via JSON Patch

cve-2026-47849 - HIGH - Spring Data REST allows mutation of identifier and version properties via JSON Patch...

7.1CVSS5.3AI score0.00273EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.14 views

cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)

cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting XSS...

8.2CVSS5.3AI score0.00164EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.14 views

cve-2026-47880 - MEDIUM - DefaultJmsHeaderMapper copies all JMS user properties into MessageHeaders without excluding framework-significant names

cve-2026-47880 - MEDIUM - DefaultJmsHeaderMapper copies all JMS user properties into MessageHeaders without excluding framework-significant names...

5.4CVSS5.2AI score0.00187EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.14 views

cve-2026-47845 - MEDIUM - Reactor Netty HTTP Server may incorrectly evaluate proxy addresses

cve-2026-47845 - MEDIUM - Reactor Netty HTTP Server may incorrectly evaluate proxy addresses...

5.3CVSS5.2AI score0.00176EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.14 views

cve-2026-47891 - MEDIUM - Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder

cve-2026-47891 - MEDIUM - Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder...

9.8CVSS5.2AI score0.0029EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/20 12:00 a.m.14 views

cve-2026-59271 - MEDIUM - Admin password disclosed in BrokerNotAliveException message

cve-2026-59271 - MEDIUM - Admin password disclosed in BrokerNotAliveException message...

6.5CVSS5.2AI score0.00324EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/08/13 12:00 a.m.14 views

A Bootiful Podcast: Redouble AI CTO and founder Andrey Santrosyan

Hi, Spring fans! In this installment, my friend James Ward and I sat down with Redouble AI CTO and founder Andrey Santrosyan This was an extra special episode because I conducted the interview with my friend, AWS' James Ward. https://www.linkedin.com/in/santrosyan/ https://redouble.ai...

5.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/10/02 12:00 a.m.14 views

A Bootiful Podcast: Dr. Kris De Volder on developer tooling for Spring developers and AI

Hi, Spring fans! In this installment we talk to Spring tooling legend Dr. Kris De Volder on tooling, AI, and so much more...

6.9AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/01/30 12:00 a.m.14 views

A Bootiful Podcast: HTMX creator Carson Gross

Hi, Spring and HTML fans! Today I talk to hypermedia enjoyer Carson Gross, creator of the ever popular HTMX library which eschews a ton of the complexity associated with building client side applications...

7AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/11/21 12:00 a.m.14 views

A Bootiful Podcast: Heroku's Terence Lee

Hi, Spring fans! Happy Spring Boot 3.4.0 release day to those who celebrate! Today I'm joined by both Terence Lee, from Heroku, and my friend DaShaun Carter, and we talk about platforms, buildpacks, and more. heroku paas buildpacks,...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/10/25 12:00 a.m.14 views

A Bootiful Podcast: GraalVM founder and BDFL Thomas Wuerthinger on GraalPy, GraalVM, and so much more

Hi, Spring fans! In this installment I talk to GraalVM founder and benevolent dictator for life Thomas Wuerthinger, recorded live from Devoxx Belgium 2024!...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/10/22 12:00 a.m.14 views

Leverage the Power of 45k, free, Hugging Face Models with Spring AI and Ollama

This blog post is co-authored by our great contributor Thomas Vitale. Ollama now supports all GGUF models from Hugging Face , allowing access to over 45,000 community-created models through Spring AI's Ollama integration, runnable locally. We'll explore using this new feature with Spring AI. The...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/09/12 12:00 a.m.14 views

A Bootiful Podcast: Spring creator and cofounder, Dr. Rod Johnson

In this wide-ranging interview, I finally sit down one-on-one and talk to Dr. Rod Johnson, the creator of Spring, entrepreneur, venture capitalist, engineer, father, Kotlin fan, AI researcher, and musician, about this, that, and everything in between, fresh off our recent SpringOne presentation o...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/09/06 12:00 a.m.14 views

A Bootiful Podcast: Sébastien Deleuze on Spring Framework and Kotlin, GraalVM, Project Leyden, AppCDS, runtime efficiency, Kotlin, and more

Dive deep into the world of Spring Framework and Kotlin, GraalVM, Project Leyden, AppCDS, runtime efficiency, Kotlin, and more, with the one and only Sébastien Deleuze! From runtime efficiency to all things Kotlin, this episode is packed with expert insights and valuable information. Don't miss o...

7.1AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2024/08/19 12:00 a.m.14 views

Missing Authorization When Using @AuthorizeReturnObject

Applications using @AuthorizeReturnObject or the Spring Security produced AuthorizationAdvisorProxyFactory @Bean to wrap objects may not have all security advice applied. When method security advice is not applied, it means that annotations like @PreFilter and @PreAuthorize may take no affect on...

7.5CVSS6.6AI score0.00458EPSS
SaveExploits0References1Affected Software1
Spring Security Advisories
Spring Security Advisories
added 2024/01/18 12:00 a.m.14 views

A Bootiful Podcast: programming language archaeologist Ted Neward

Hi, Spring fans! In this installment, I talk to programming language archaeologist Ted Neward...

7.2AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/05/02 12:00 a.m.14 views

This Week in Spring - May 2, 20223

Hi, Spring fans! Welcome to another installment of This Week in Spring! You realize it's already May, 2023? Time's flying, way too quickly! I just got back from Bangalore, India, where I spoke at the amazing Great International Developer Summit, one of the all time best shows ever, and now I'm...

6.8AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/01/20 12:00 a.m.14 views

Spring Modulith 0.3 released

Hot on the heels of Spring Boot 3.0.2, I am excited to announce the 0.3 release of Spring Modulith. The release is packed with improvements. We have tweaked a couple of things that might require your attention and a couple of adapting changes to your code. The most notable changes are: GH-114 – W...

SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2022/05/26 3:00 p.m.14 views

A Bootiful Podcast: the good Dr. David Syer on the new and novel in Spring and Kubernetes

Hi, Spring fans! In this installment, Josh Long talks to Spring Boot and Spring Cloud luminary, the good Dr. @DavidSyer, about the latest and greatest on Spring and Kubernetes...

0.8AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2020/06/10 12:00 a.m.14 views

Jackson Configuration Allows Code Execution with Unknown “Serialization Gadgets”

When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with global default typing enabled which means...

8.1CVSS6.1AI score0.0178EPSS
SaveExploits0References2
Total number of security vulnerabilities1048