| CVE-2026-59313 |
Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent…
|
9.8
Critical
|
Aug 27, 2026 |
| CVE-2026-59283 |
Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable…
|
9.1
Critical
|
Aug 27, 2026 |
| CVE-2026-47892 |
A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header…
|
9.8
Critical
|
Aug 27, 2026 |
| CVE-2026-47891 |
A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the…
|
9.8
Critical
|
Aug 27, 2026 |
| CVE-2026-47890 |
Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view…
|
9.8
Critical
|
Aug 27, 2026 |
| CVE-2026-47884 |
Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping…
|
9.8
Critical
|
Aug 27, 2026 |