Spring / Spring Framework
45 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-41847 | Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL | MEDIUM | 5.3 | Jun 9, 2026 |
| CVE-2026-41846 | Spring Framework Cross-site Scripting via JSP Form Tags | MEDIUM | 6.8 | Jun 9, 2026 |
| CVE-2026-41845 | Spring Framework Cross-site Scripting via JavaScriptUtils | HIGH | 7.1 | Jun 9, 2026 |
| CVE-2026-41844 | Spring Framework Open Redirect in Spring MVC and WebFlux | MEDIUM | 6.1 | Jun 9, 2026 |
| CVE-2026-41843 | Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux | MEDIUM | 5.9 | Jun 9, 2026 |
| CVE-2026-41842 | Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux | HIGH | 7.5 | Jun 9, 2026 |
| CVE-2026-41841 | Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux | MEDIUM | 5.9 | Jun 9, 2026 |
| CVE-2026-41840 | Spring Framework: Spring WebFlux: Denial of Service via multipart request processing | MEDIUM | 5.9 | Jun 9, 2026 |
| CVE-2026-41839 | Spring Framework Escalation via Session Fixation in WebFlux | MEDIUM | 4.2 | Jun 9, 2026 |
| CVE-2026-41838 | Spring Framework Predictable Session ID in WebSocket Module | HIGH | 7.5 | Jun 9, 2026 |
| CVE-2026-22737 | Spring Framework Improper Path Limitation with Script View Templates | MEDIUM | 6.5 | Mar 19, 2026 |
| CVE-2025-22233 | Spring Framework DataBinder Case Sensitive Match Exception | LOW | 3.1 | May 16, 2025 |
| CVE-2024-38808 | CVE-2024-38808: Spring Expression DoS Vulnerability | MEDIUM | 5.1 | Aug 20, 2024 |
| CVE-2024-22262 | CVE-2024-22262: Spring Framework URL Parsing with Host Validation | HIGH | 8.1 | Apr 16, 2024 |
| CVE-2024-22259 | CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report) | HIGH | 8.1 | Mar 16, 2024 |
| CVE-2024-22243 | CVE-2024-22243: Spring Framework URL Parsing with Host Validation | HIGH | 8.1 | Feb 23, 2024 |
| CVE-2024-22233 | CVE-2024-22233: Spring Framework server Web DoS Vulnerability | HIGH | 7.5 | Jan 22, 2024 |
| CVE-2023-34053 | Spring Framework server Web Observations DoS Vulnerability | HIGH | 7.5 | Nov 28, 2023 |
| CVE-2020-5397 | CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux | MEDIUM | 5.3 | Jan 17, 2020 |
| CVE-2020-5398 | RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application | HIGH | 8.0 | Jan 16, 2020 |
Showing 26 to 45 of 45 CVEs