CVE-2026-59324fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity High CVE-2026-59322EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity Medium CVE-2026-59321Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity Medium CVE-2026-59320In Spring AMQP the link credit never replenished on listener exception path Exploitation status Not known exploited Fix Not confirmed Affected product S Spring AMQP Published 08/27/2026 Severity Medium CVE-2026-59319RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure Exploitation status Not known exploited Fix Not confirmed Affected product S Spring AI Published 08/27/2026 Severity Medium CVE-2026-59317In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop Exploitation status Not known exploited Fix Affected product S Spring for Apache Kafka Published 08/27/2026 Severity Medium CVE-2026-59315Spring Cloud Config Monitor Denial of Service Exploitation status Not known exploited Fix Affected product S Spring Cloud Config Published 08/27/2026 Severity Medium CVE-2026-59314Spring Framework response splitting in ContentDisposition Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Low CVE-2026-59311Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creation Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity Medium CVE-2026-59306Potential for deserialization of untrusted types in Spring Cloud Stream Exploitation status Not known exploited Fix Affected product S Spring Cloud Stream Published 08/27/2026 Severity Low CVE-2026-59313Server Sent Event stream corruption in Spring MVC functional web framework Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Critical CVE-2026-59307Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity High CVE-2026-59305Partition interceptor may be improperly added while sending message Exploitation status Not known exploited Fix Affected product S Spring Cloud Stream Published 08/27/2026 Severity Low CVE-2026-59304Improper caching of the original content type in Spring Cloud Stream Avro Exploitation status Not known exploited Fix Affected product S Spring Cloud Stream Published 08/27/2026 Severity Low CVE-2026-59303Dynamic destination cache size is not properly bound in Spring Cloud Stream Exploitation status Not known exploited Fix Affected product S Spring Cloud Stream Published 08/27/2026 Severity Low CVE-2026-59301Potential for logging sensitive data in Spring Cloud Function Azure Exploitation status Not known exploited Fix Affected product S Spring Cloud Function Published 08/27/2026 Severity Low CVE-2026-59300Potential for logging sensitive data in Spring Cloud Function AWS Exploitation status Not known exploited Fix Affected product S Spring Cloud Function Published 08/27/2026 Severity Low CVE-2026-59299Composition lookup can potentially poison base function in Spring Cloud Function Exploitation status Not known exploited Fix Affected product S Spring Cloud Function Published 08/27/2026 Severity Low CVE-2026-59298Potential for improper filtering of HTTP headers in Spring Cloud Function Exploitation status Not known exploited Fix Affected product S Spring Cloud Function Published 08/27/2026 Severity Low CVE-2026-59297Spring Cloud Function can incorrectly determine if URI is secure Exploitation status Not known exploited Fix Affected product S Spring Cloud Function Published 08/27/2026 Severity Low CVE-2026-59294Arbitrary File Write via Path Traversal in ResourceCacheService Exploitation status Not known exploited Fix Affected product S Spring AI Published 08/27/2026 Severity Medium CVE-2026-59293SMB minimum protocol dialect defaults to SMB1 Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity Medium CVE-2026-59292World-readable metadata file in PropertiesPersistingMetadataStore (insecure temp-file permissions) Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity Low CVE-2026-59291Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function Exploitation status Not known exploited Fix Affected product S Spring Cloud Function Published 08/27/2026 Severity Low CVE-2026-59289Spring for GraphQL Denial of Service via pagination support Exploitation status Not known exploited Fix Affected product S Spring for GraphQL Published 08/27/2026 Severity High CVE-2026-59288Spring for GraphQL Information Exposure in GraphiQL support Exploitation status Not known exploited Fix Affected product S Spring for GraphQL Published 08/27/2026 Severity High CVE-2026-59287Spring for GraphQL WebSocket Client Denial of Service Exploitation status Not known exploited Fix Affected product S Spring for GraphQL Published 08/27/2026 Severity Medium CVE-2026-59286Spring for GraphQL loads Untrusted Resources in GraphiQL support Exploitation status Not known exploited Fix Affected product S Spring for GraphQL Published 08/27/2026 Severity High CVE-2026-59285Spring for GraphQL Unsafe Deserialization in pagination support Exploitation status Not known exploited Fix Affected product S Spring for GraphQL Published 08/27/2026 Severity High CVE-2026-59283Spring Framework Safety Guard Bypass via SpEL Expression Compilation Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Critical CVE-2026-59282Spring Framework Denial of Service via Unbounded List Growth in Data Binding Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity High CVE-2026-59281Spring Framework Cross-site Scripting via EscapedErrors Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Medium CVE-2026-59277Spring Security InetAddressMatchers Incomplete Internal Network Classification Exploitation status Not known exploited Fix Not confirmed Affected product S Spring Security Published 08/27/2026 Severity Low CVE-2026-59276Timing Attack via Non-Constant-Time Comparison of Sensitive Values Exploitation status Not known exploited Fix Affected product S Spring Security Published 08/27/2026 Severity Medium CVE-2026-59280Spring Framework Path Traversal via Backslash in SpringTemplateLoader Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Medium CVE-2026-59272Log4j2 AmqpAppender disables TLS hostname verification by default Exploitation status Not known exploited Fix Affected product S Spring AMQP Published 08/27/2026 Severity Medium CVE-2026-59355Spring Authorization Server: Open Redirect via request_uri parameter Exploitation status Not known exploited Fix Affected product S Spring Authorization Server Published 08/27/2026 Severity Medium CVE-2026-59354Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata Exploitation status Not known exploited Fix Affected product S Spring Security (OAuth2 Authorization Server module) Published 08/27/2026 Severity Critical CVE-2026-47893Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity High CVE-2026-47892Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Critical CVE-2026-47891Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Critical CVE-2026-47890Spring Framework Server Sent Event stream corruption while rendering fragments Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Critical CVE-2026-47889Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity High CVE-2026-47888Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity High CVE-2026-47887Spring Framework Open Redirect in UrlFileNameViewController Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Medium CVE-2026-47886Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity High CVE-2026-47885Spring Framework maxPartSize Ignored in PartEventHttpMessageReader Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity High CVE-2026-47884Spring Framework Improper Path Limitation in XsltView Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Critical CVE-2026-47883Spring Framework Open Redirect in UrlHandlerFilter Exploitation status Not known exploited Fix Affected product S Spring Framework Published 08/27/2026 Severity Medium CVE-2026-59278In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages Exploitation status Not known exploited Fix Affected product S Spring for Apache Kafka Published 08/27/2026 Severity Medium CVE-2026-59275Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99) Exploitation status Not known exploited Fix Affected product S Spring AMQP Published 08/27/2026 Severity Medium CVE-2026-59274Unbounded decompression in UnZipTransformer enables zip-bomb DoS Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity Medium CVE-2026-59271Admin password disclosed in BrokerNotAliveException message Exploitation status Not known exploited Fix Affected product S Spring AMQP Published 08/27/2026 Severity Medium CVE-2026-59270Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces Exploitation status Not known exploited Fix Affected product S Spring Security Published 08/27/2026 Severity Critical CVE-2026-47894Spring Cloud Config Server Native Environment Repository Exposure Exploitation status Not known exploited Fix Affected product S Spring Cloud Config Published 08/27/2026 Severity Medium CVE-2026-47880DefaultJmsHeaderMapper copies all JMS user properties into MessageHeaders without excluding framework-significant names Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity Medium CVE-2026-47879Spring Cloud Gateway SSRF and native file access with gRPC Exploitation status Not known exploited Fix Affected product S Spring Cloud Gateway Published 08/27/2026 Severity High CVE-2026-47877Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product S Spring Security Published 08/27/2026 Severity High CVE-2026-47864Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/27/2026 Severity Medium CVE-2026-47849Spring Data REST allows mutation of identifier and version properties via JSON Patch Exploitation status Not known exploited Fix Affected product S Spring Data REST Published 08/27/2026 Severity High CVE-2026-47861UDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when acknowledge=false Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/26/2026 Severity Medium CVE-2026-47862ZipTransformer uses file_name header to build workDirectory path without sanitization Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/26/2026 Severity Medium CVE-2026-47860Unbounded decompression of attacker-supplied compressed message bodies Exploitation status Not known exploited Fix Affected product S Spring AMQP Published 08/26/2026 Severity Medium CVE-2026-47859Unbounded memory allocation in RFC6587SyslogDeserializer (octet-counted framing) — remote DoS Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/26/2026 Severity Medium CVE-2026-47856JsonToObjectTransformer resolves the json__TypeId__ message header to an arbitrary class without an allow-list Exploitation status Not known exploited Fix Affected product S Spring Integration Published 08/26/2026 Severity Medium CVE-2026-47852Predictable cache directory location allows local ONNX model substitution in Spring AI Exploitation status Not known exploited Fix Affected product S Spring AI Published 08/26/2026 Severity High CVE-2026-47851Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader Exploitation status Not known exploited Fix Affected product S Spring AI Published 08/26/2026 Severity High CVE-2026-47850Spring Data REST allows mutation of the version property of immutable aggregates via PUT Exploitation status Not known exploited Fix Affected product S Spring Data REST Published 08/26/2026 Severity Medium CVE-2026-47842Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation Exploitation status Not known exploited Fix Affected product S Spring Security Published 08/26/2026 Severity Medium CVE-2026-47834Spring Data JPA Sort expression validation bypass Exploitation status Not known exploited Fix Affected product S Spring Data JPA Published 08/26/2026 Severity Medium CVE-2026-47841WebAuthn User Verification Bypass via Session Serialization Exploitation status Not known exploited Fix Affected product S Spring Security Published 08/26/2026 Severity High CVE-2026-47837Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests Exploitation status Not known exploited Fix Affected product S Spring Cloud Config Published 08/26/2026 Severity Medium CVE-2026-47836Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN Exploitation status Not known exploited Fix Affected product S Spring Cloud Config Published 08/26/2026 Severity High CVE-2026-59296Micrometer StatsD and Logging meter registries line-protocol and log injection vulnerability Exploitation status Not known exploited Fix Affected product M Micrometer Published 08/21/2026 Severity Medium CVE-2026-59323Micrometer Tracing Brave Bridge W3C Baggage propagation DoS vulnerability Exploitation status Not known exploited Fix Affected product M Micrometer Tracing Published 08/21/2026 Severity Medium CVE-2026-41709ESX insufficient logging vulnerability Exploitation status Not known exploited Fix Affected product C Cloud Foundation Published 07/30/2026 Severity Low CVE-2026-41703Out-of-bounds read vulnerability Exploitation status Not known exploited Fix Affected product C Cloud Foundation Published 07/30/2026 Severity High CVE-2026-47876VMXNET3 out-of-bounds write vulnerability Exploitation status Not known exploited Fix Affected product C Cloud Foundation Published 07/30/2026 Severity Critical CVE-2026-47871VMware Avi Load Balancer Directory Traversal Vulnerability Exploitation status Not known exploited Fix Affected product A Avi Load Balancer Published 07/18/2026 Severity High CVE-2026-47870VMware Avi Load Balancer Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product A Avi Load Balancer Published 07/18/2026 Severity High CVE-2026-47869VMware Avi Load Balancer Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Avi Load Balancer Published 07/18/2026 Severity High CVE-2026-47868VMware Avi Load Balancer Local Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product A Avi Load Balancer Published 07/18/2026 Severity High CVE-2026-47867VMware Avi Load Balancer Remote Code Execution Vulnerability Exploitation status Not known exploited Fix Affected product A Avi Load Balancer Published 07/18/2026 Severity High CVE-2026-47866VMware Avi Load Balancer Authorization Bypass Vulnerability Exploitation status Not known exploited Fix Affected product A Avi Load Balancer Published 07/18/2026 Severity High CVE-2026-47865VMware Avi Load Balancer Authentication Bypass Vulnerability Exploitation status Not known exploited Fix Affected product A Avi Load Balancer Published 07/18/2026 Severity Critical CVE-2026-59269Privilege Escalation via Active Directory LDAP injection in Pinniped Supervisor can be executed by an attacker who can edit LDAP Group DN entries Exploitation status Not known exploited Fix Affected product P Pinniped Published 07/09/2026 Severity Low CVE-2026-47835Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores Exploitation status Not known exploited Fix Affected product S Spring AI Published 06/15/2026 Severity High CVE-2026-41856Spring GraphQL Annotation Detection Vulnerability Exploitation status Not known exploited Fix Affected product S Spring for GraphQL Published 06/11/2026 Severity High CVE-2026-41700Cross-Site WebSocket Hijacking in Spring for GraphQL Exploitation status Not known exploited Fix Affected product S Spring for GraphQL Published 06/11/2026 Severity High CVE-2026-41699Unsafe Deserialization in Spring GraphQL Exploitation status Not known exploited Fix Affected product S Spring for GraphQL Published 06/11/2026 Severity High CVE-2026-41001Predictable Temp Directory in Artemis Auto-configuration Exploitation status Not known exploited Fix Affected product S Spring Boot Published 06/11/2026 Severity Medium CVE-2026-40992Mail Auto-Configuration Does Not Enable SSL Hostname Verification Exploitation status Not known exploited Fix Affected product S Spring Boot Published 06/11/2026 Severity Medium CVE-2026-40987Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization Exploitation status Not known exploited Fix Affected product S Spring Integration Published 06/11/2026 Severity High CVE-2026-47838Unauthorized User Impersonation when Using X.509 Client Certificates Exploitation status Not known exploited Fix Affected product S Spring Security Published 06/09/2026 Severity Medium CVE-2026-41837Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys Exploitation status Not known exploited Fix Affected product S Spring Data REST Published 06/09/2026 Severity Medium CVE-2026-41732In Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization Exploitation status Not known exploited Fix Affected product S Spring for Apache Pulsar Published 06/09/2026 Severity High CVE-2026-41731In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization Exploitation status Not known exploited Fix Affected product S Spring for Apache Kafka Published 06/09/2026 Severity High CVE-2026-41730Spring Data REST exposes persistence-layer internals in error responses Exploitation status Not known exploited Fix Affected product S Spring Data REST Published 06/09/2026 Severity Medium CVE-2026-41729Spring Data REST SpEL Injection via Map Key in JSON Patch Exploitation status Not known exploited Fix Affected product S Spring Data REST Published 06/09/2026 Severity High CVE-2026-41728Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections Exploitation status Not known exploited Fix Affected product S Spring Data REST Published 06/09/2026 Severity High 
.svg){kind=icon}
