| CVE-2026-22745 |
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources
|
5.3
Medium
|
Apr 29, 2026 |
| CVE-2026-22741 |
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources
|
3.1
Low
|
Apr 29, 2026 |
| CVE-2026-22740 |
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K
|
6.5
Medium
|
Apr 29, 2026 |
| CVE-2025-41254 |
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized…
|
4.3
Medium
|
Oct 16, 2025 |
| CVE-2025-41249 |
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type…
|
7.5
High
|
Sep 16, 2025 |
| CVE-2025-41242 |
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant…
|
5.9
Medium
|
Aug 18, 2025 |
| CVE-2025-41234 |
Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a…
|
6.5
Medium
|
Jun 12, 2025 |