Spring / Spring Hateoas

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-41007	Spring HATEOAS heap exhaustion through unbounded internal caching	HIGH	7.5	Jun 9, 2026
CVE-2026-41006	Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration	HIGH	7.5	Jun 9, 2026
CVE-2023-34036	Forwarded header exploit with Spring HATEOAS on WebFlux	MEDIUM	5.3	Jul 17, 2023

Rows per page

Showing 1 to 3 of 3 CVEs