Spring Spring Authorization Server

• CVE-2026-59316 High 8.2 Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS) 0.3%
• CVE-2026-41008 Medium 6.1 Spring Security Authorization Server Open Redirect via request_uri 0.2%