Spring Reactor Core

• CVE-2026-47863 Medium 5.9 Reactor Core bufferTimeout fair-backpressure pipeline permanently hangs when upstream delivers items during an active flush 0.4%
• CVE-2026-47857 Medium 5.9 Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around 0.4%