CVE-2026-41842: Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux

🗓️ 08 Jun 2026 00:00:00Reported by SpringType

spring🔗 spring.io👁 34 Views

CVE-2026-41842: Spring Framework DoS via slow resolution of versioned resources in Spring MVC and WebFlux.

Reporter	Title	Published	Views	Family All 56
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Framework vulnerability that could allow Information Disclosure, Denial of Service (Dos) attacks, and Path Traversal attacks	26 Jun 202618:21	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Controller	21 Jul 202603:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring MVC [CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846]	27 Jul 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-webmvc jar	27 Jul 202607:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	30 Jun 202610:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.	22 Jul 202607:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	10 Jul 202603:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring-core affects IBM Netezza Appliance	7 Aug 202612:05	–	ibm
Chainguard	CVE-2026-41842 vulnerabilities	31 Jul 202620:22	–	cgr