Spring Security Spring Authorization Server

• CVE-2026-22752 Critical 9.6 Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata 0.5%