Server Sent Event stream corruption in Spring MVC functional web framework

Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder

Spring Framework Server Sent Event stream corruption while rendering fragments

Spring Framework Improper Path Limitation in XsltView

Spring Framework Unsafe Deserialization via Jackson JMS Converters

Spring Framework Safety Guard Bypass via SpEL Expression Compilation

Spring Framework Denial of Service via Unbounded List Growth in Data Binding

Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse

Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler

Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions

Spring Framework maxPartSize Ignored in PartEventHttpMessageReader

Spring Framework Denial of Service via Unbounded Cache in SpEL

Spring Framework Algorithmic Denial of Service via SpEL Expressions

Spring Framework Denial of Service via Integer Overflow in SpEL Expressions

Spring Framework Denial of Service via AntPathMatcher

Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux

Spring Framework Predictable Session ID in WebSocket Module

RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application

Spring Framework Server-Side Request Forgery via UriComponentsBuilder

Spring Framework Cross-site Scripting via EscapedErrors

Spring Framework Open Redirect in UrlFileNameViewController

Spring Framework Open Redirect in UrlHandlerFilter

Spring Framework Cross-site Scripting via JSP Form Tags

Spring Framework Cross-site Scripting via JavaScriptUtils

Spring Framework Open Redirect in Spring MVC and WebFlux

Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux

Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux

Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests

Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux

Spring Framework Arbitrary Method Invocation in SpEL Expressions

Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

Spring Framework Path Traversal via Backslash in SpringTemplateLoader

Spring Framework Escalation via Session Fixation in WebFlux

Spring Framework response splitting in ContentDisposition