Low
CVE-2026-22746
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 31
Reset filters
Medium
CVE-2026-22751
Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configured
Medium
CVE-2025-22234
Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide
High
CVE-2025-41248
Spring Security annotation detection mechanism has authorization bypass
Critical
CVE-2025-41232
Spring Security authorization bypass for method security annotations on private methods
Medium
CVE-2025-22223
Spring Security Vulnerable to Authorization Bypass via Security Annotations
Medium
CVE-2024-38827
Spring Framework has Authorization Bypass for Case Sensitive Comparisons
Medium
CVE-2024-38810
Spring Security Missing Authorization vulnerability
High
CVE-2024-22257
Erroneous authentication pass in Spring Security
High
CVE-2024-22234
Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated
Medium
CVE-2023-20862
Spring Security logout not clearing security context
Critical
CVE-2022-31692
Spring Security authorization rules can be bypassed via forward or include dispatcher types
Critical
CVE-2022-22978
Authorization bypass in Spring Security
Medium
CVE-2022-22976
Integer overflow in BCrypt class in Spring Security
Medium
CVE-2011-2732
Improper Control of Generation of Code in Spring Security
Medium
CVE-2012-5055
Exposure of Sensitive Information to an Unauthorized Actor in Spring Security
Medium
CVE-2011-2731
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
Medium
CVE-2011-2894
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data
Medium
CVE-2010-3700
Authentication Bypass Using an Alternate Path or Channel in SpringSource Spring Security and Acegi Security
High
CVE-2017-4995
Deserialization of Untrusted Data in Spring Security
High
CVE-2014-0097
Improper Authentication in Spring Security
High
CVE-2021-22119
Resource Exhaustion in Spring Security
High
CVE-2016-9879
Security Constraint Bypass in Spring Security
Critical
CVE-2014-3527
Authorization Bypass in Spring Security
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.