Known vulnerabilities in Spring Authorization Server
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-59316 | Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding | 8.2 High | Aug 27, 2026 |
| CVE-2026-41008 | Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri… | 6.1 Medium | Jun 9, 2026 |