| CVE-2026-22745 |
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources
|
5.3
Moyenne
|
29 avr. 2026 |
| CVE-2026-22741 |
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources
|
3.1
Faible
|
29 avr. 2026 |
| CVE-2026-22740 |
A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K
|
6.5
Moyenne
|
29 avr. 2026 |
| CVE-2025-41254 |
STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized…
|
4.3
Moyenne
|
16 oct. 2025 |
| CVE-2025-41249 |
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type…
|
7.5
Élevée
|
16 sept. 2025 |
| CVE-2025-41242 |
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant…
|
5.9
Moyenne
|
18 août 2025 |
| CVE-2025-41234 |
Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a…
|
6.5
Moyenne
|
12 juin 2025 |