SF
Product
Spring Framework
On CISA KEVExploited in the wild
83
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 26Medium 35Low 3
Watch
Add Spring Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59314 | 3.7 | Aug 27 | Spring Framework response splitting in ContentDisposition Affected: through 5.2.25; 5.3.0 through 5.3.49; 6.0.0 through 6.0.30; 6.1.0 through 6.1.28; 6.2.0 through 6.2.19; 7.0.0 through 7.0.8 |
| CVE-2026-22741 | 3.1 | Apr 29 | Static resource cache poisoning in Spring MVC and WebFlux Affected: 7.0.0 before 7.0.7; 6.2.0 before 6.2.18; 6.1.0 before 6.1.27; 5.3.0 before 5.3.48 |
| CVE-2026-22735 | 2.6 | Mar 19 | Server Sent Event stream corruption Affected: before 5.3.47; 6.1.0 before 6.1.26; 6.2.0 before 6.2.17; 7.0.0 before 7.0.6 |
Showing 3