VMWare Spring Security

• CVE-2026-22732 Critical 9.1 Under Some Conditions Spring Security HTTP Headers Are not Written 0.5%
• CVE-2025-41248 High 7.5 CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types 0.4%