Spring Spring Framework

• CVE-2026-59314 Low 3.7 Spring Framework response splitting in ContentDisposition 0.3%
• CVE-2026-59313 Critical 9.8 Server Sent Event stream corruption in Spring MVC functional web framework 0.6%
• CVE-2026-59283 Critical 9.1 Spring Framework Safety Guard Bypass via SpEL Expression Compilation 0.5%
• CVE-2026-59282 High 7.5 Spring Framework Denial of Service via Unbounded List Growth in Data Binding 0.5%
• CVE-2026-59281 Medium 6.1 Spring Framework Cross-site Scripting via EscapedErrors 0.3%
• CVE-2026-59280 Medium 4.3 Spring Framework Path Traversal via Backslash in SpringTemplateLoader 0.3%
• CVE-2026-47893 High 7.5 Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService 0.5%
• CVE-2026-47892 Critical 9.8 Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints 0.5%
• CVE-2026-47891 Critical 9.8 Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder 0.5%
• CVE-2026-47890 Critical 9.8 Spring Framework Server Sent Event stream corruption while rendering fragments 0.6%
• CVE-2026-47889 High 7.5 Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse 0.4%
• CVE-2026-47888 High 7.5 Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler 0.5%
• CVE-2026-47887 Medium 6.1 Spring Framework Open Redirect in UrlFileNameViewController 0.2%
• CVE-2026-47886 High 7.5 Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions 0.5%
• CVE-2026-47885 High 7.5 Spring Framework maxPartSize Ignored in PartEventHttpMessageReader 0.4%
• CVE-2026-47884 Critical 9.8 Spring Framework Improper Path Limitation in XsltView 0.6%
• CVE-2026-47883 Medium 6.1 Spring Framework Open Redirect in UrlHandlerFilter 0.3%
• CVE-2026-41855 High 8.1 Spring Framework Unsafe Deserialization via Jackson JMS Converters 0.3%
• CVE-2026-41854 Medium 4.2 Spring Framework Server-Side Request Forgery via UriComponentsBuilder 0.1%
• CVE-2026-41853 Medium 5.3 Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux 0.2%
• CVE-2026-41852 Low 3.7 Spring Framework Arbitrary Method Invocation in SpEL Expressions 0.2%
• CVE-2026-41851 Medium 5.3 Spring Framework Denial of Service via Unbounded Cache in SpEL 0.4%
• CVE-2026-41850 High 7.5 Spring Framework Algorithmic Denial of Service via SpEL Expressions 0.4%
• CVE-2026-41849 High 7.5 Spring Framework Denial of Service via Integer Overflow in SpEL Expressions 0.3%
• CVE-2026-41848 Low 3.7 Spring Framework Denial of Service via AntPathMatcher 0.3%
• CVE-2026-41847 Medium 4.8 Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL 0.2%
• CVE-2026-41846 Medium 5.9 Spring Framework Cross-site Scripting via JSP Form Tags 0.2%
• CVE-2026-41845 High 7.1 Spring Framework Cross-site Scripting via JavaScriptUtils 0.2%
• CVE-2026-41844 Medium 4.2 Spring Framework Open Redirect in Spring MVC and WebFlux 0.1%
• CVE-2026-41843 Medium 5.9 Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux 0.4%
• CVE-2026-41842 High 7.5 Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux 0.4%
• CVE-2026-41841 Medium 5.9 Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux 0.3%
• CVE-2026-41840 Medium 5.9 Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 t 0.3%
• CVE-2026-41839 Medium 4.2 Spring Framework Escalation via Session Fixation in WebFlux 0.2%
• CVE-2026-41838 Medium 4.8 Spring Framework Predictable Session ID in WebSocket Module 0.2%
• CVE-2026-22737 Medium 5.9 Spring Framework Improper Path Limitation with Script View Templates 0.4%
• CVE-2025-22233 Low 3.1 Spring Framework DataBinder Case Sensitive Match Exception 0.4%
• CVE-2024-38808 Medium 4.3 CVE-2024-38808: Spring Expression DoS Vulnerability 0.6%
• CVE-2024-22262 High 8.1 CVE-2024-22262: Spring Framework URL Parsing with Host Validation 1.2%
• CVE-2024-22259 High 8.1 CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report) 2.6%
• CVE-2024-22243 High 8.1 CVE-2024-22243: Spring Framework URL Parsing with Host Validation 4.0%
• CVE-2024-22233 High 7.5 CVE-2024-22233: Spring Framework server Web DoS Vulnerability 1.0%
• CVE-2023-34053 Medium 5.3 Spring Framework server Web Observations DoS Vulnerability 1.2%
• CVE-2020-5397 Medium 5.3 CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux 2.6%
• CVE-2020-5398 High 8.0 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application 88.3%