Critical
CVE-2026-47892
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 47
Reset filters
Critical
CVE-2026-47890
Spring Framework Server Sent Event stream corruption while rendering fragments
Critical
CVE-2026-47884
Spring Framework Improper Path Limitation in XsltView
Medium
CVE-2026-41853
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux
Medium
CVE-2026-41846
Spring Framework Cross-site Scripting via JSP Form Tags
Medium
CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Medium
CVE-2026-41847
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL
Medium
CVE-2026-41841
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
Medium
CVE-2026-41840
Spring Framework Denial of Service via Multipart Requests in WebFlux
High
CVE-2026-41845
Spring Framework Cross-site Scripting via JavaScriptUtils
High
CVE-2026-41842
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux
Medium
CVE-2026-41844
Spring Framework Open Redirect in Spring MVC and WebFlux
Medium
CVE-2026-41843
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
Medium
CVE-2026-41839
Spring Framework Escalation via Session Fixation in WebFlux
Medium
CVE-2026-41838
Spring Framework Predictable Session ID in WebSocket Module
Low
CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
Medium
CVE-2026-22745
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources
Medium
CVE-2026-22740
Spring Framework DoS with Multipart Temp Files in WebFlux
Low
CVE-2026-22735
Spring MVC and WebFlux has Server Sent Event stream corruption
Medium
CVE-2026-22737
Spring Framework Improper Path Limitation with Script View Templates
Medium
CVE-2025-41254
Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages
Medium
CVE-2025-41242
Spring Framework MVC Applications Path Traversal Vulnerability
Medium
CVE-2025-41234
Spring Framework vulnerable to a reflected file download (RFD)
High
CVE-2024-38819
Spring Framework Path Traversal vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.