en
Spring is an open-source Java ecosystem focused on enterprise application development. It coordinates a family of projects (e.g., Spring Framework, Spring Boot, Spring Cloud) through community governance and corporate sponsorship. It operates as a global, broadly adopted technology stack for building scalable, maintainable Java applications.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/22/2026, Spring recorded 97 security vulnerabilities in the last 90 days across 22 products, including 32 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Spring Framework had the most security vulnerabilities in the Spring ecosystem, with 17 vulnerabilities—approximately 17.53% of the provider's total vulnerabilities during this period.
CVE-2026-59324fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunctionCVE-2026-59322EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeadersCVE-2026-59321Shared JSR-223 ScriptEngine evaluated concurrently without THREADING checkCVE-2026-59320In Spring AMQP the link credit never replenished on listener exception pathCVE-2026-59319RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure248 Results | Page 1 of 25
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityLow |
| SeverityMedium |