Critical
CVE-2026-47890
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 27
Reset filters
Critical
CVE-2026-47884
Spring Framework Improper Path Limitation in XsltView
Medium
CVE-2026-41853
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux
Medium
CVE-2026-41846
Spring Framework Cross-site Scripting via JSP Form Tags
Medium
CVE-2026-41841
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
High
CVE-2026-41845
Spring Framework Cross-site Scripting via JavaScriptUtils
High
CVE-2026-41842
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux
Medium
CVE-2026-41844
Spring Framework Open Redirect in Spring MVC and WebFlux
Medium
CVE-2026-41843
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
Low
CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
Medium
CVE-2026-22745
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources
Low
CVE-2026-22735
Spring MVC and WebFlux has Server Sent Event stream corruption
Medium
CVE-2026-22737
Spring Framework Improper Path Limitation with Script View Templates
Medium
CVE-2025-41242
Spring Framework MVC Applications Path Traversal Vulnerability
High
CVE-2024-38819
Spring Framework Path Traversal vulnerability
Medium
CVE-2024-38828
Spring MVC controller vulnerable to a DoS attack
High
CVE-2024-38816
Path traversal vulnerability in functional web frameworks
High
CVE-2023-34053
Spring Framework vulnerable to denial of service
Critical
CVE-2023-20860
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch
Medium
CVE-2014-1904
Improper Neutralization of Input During Web Page Generation in Spring Framework
Medium
CVE-2014-3625
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
High
CVE-2014-0225
Improper Restriction of XML External Entity Reference in Spring Framework
Medium
CVE-2014-0054
Cross-Site Request Forgery in Spring Framework
Critical
Exploited in attacks
CVE-2022-22965
Remote Code Execution in Spring Framework
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.