ai.astraform:remote-domain-conformance-java (0.2.0), ai.astraform:remote-domain-template-java-spring (0.2.0) +3997 more potentially affected by CVE-2026-47890 via org.springframework:spring-webmvc (>=7.0.0, <=7.0.8)

🗓️ 27 Aug 2026 06:31:34Reported by Vulners OSVType

vulnersosv🔗 github.com👁 1 Views

Vulnerability in spring-webmvc via CVE-2026-47890.

Reporter	Title	Published	Views	Family All 110
IBM Security Bulletins	Security Bulletin: Security Vulnerability identified in Spring - 6.2.19 used by IBM Maximo Application Suite - MREF	15 Oct 202613:32	–	ibm
IBM Security Bulletins	Security Bulletin: DEV-EXT - spring-webmvc-6.2.19.jar (Publicly disclosed vulnerability found by Scanner)	17 Sep 202620:40	–	ibm
IBM Security Bulletins	Security Bulletin: As an Spring MVC application, IBM Sterling Control Center is vulnerable to Path Traversal, Open Redirect and CRLF Injection (CVE-2026-47884, CVE-2026-47887, CVE-2026-47890)	5 Oct 202619:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for Sept 2026 - Multiple CVEs addressed	1 Oct 202606:14	–	ibm
Chainguard	CVE-2026-47890 vulnerabilities	8 Oct 202620:54	–	cgr
Circl	CVE-2026-47890	3 Sep 202603:37	–	circl
CVE	CVE-2026-47890	27 Aug 202605:21	–	cve
Cvelist	CVE-2026-47890 Spring Framework Server Sent Event stream corruption while rendering fragments	27 Aug 202605:21	–	cvelist
Debian CVE	CVE-2026-47890	27 Aug 202605:21	–	debiancve
EUVD	EUVD-2026-66858	27 Aug 202605:21	–	euvd

07 Oct 2026 13:20Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.00564

SSVC

spring-webmvc CVE-2026-47890