Known vulnerabilities in Spring HATEOAS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-41007 | Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker-supplied strings | 7.5 High | Jun 9, 2026 |
| CVE-2026-41006 | Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media… | 7.5 High | Jun 9, 2026 |
| CVE-2023-34036 | Reactive web applications that use Spring HATEOAS to produce hypermedia-based responses might be exposed to malicious… | 5.3 Medium | Jul 17, 2023 |