SP
Vendor
Spring
210
CVEs
0
On KEV
0
New 30D
Products
SF9.8
Spring Framework
Spring
36 CVEs0 on KEV0 new
SS9.1
Spring Security
Spring
20 CVEs0 on KEV0 new
SA9.8
Spring AI
Spring
18 CVEs0 on KEV0 new
SI9.8
Spring Integration
Spring
16 CVEs0 on KEV0 new
SB9.8
Spring Boot
Spring
10 CVEs0 on KEV0 new
SC9.8
Spring Cloud Config
Spring
8 CVEs0 on KEV0 new
SC6.5
Spring Cloud Function
Spring
8 CVEs0 on KEV0 new
SF9.8
Spring for GraphQL
Spring
8 CVEs0 on KEV0 new
SW9.8
Spring Web Services
Spring
8 CVEs0 on KEV0 new
SA6.8
Spring AMQP
Spring
7 CVEs0 on KEV0 new
RN6.1
Reactor Netty
Spring
6 CVEs0 on KEV0 new
SD8.1
Spring Data REST
Spring
6 CVEs0 on KEV0 new
ST8.3
Spring Tools for Eclipse
Spring
6 CVEs0 on KEV0 new
SC4.9
Spring Cloud Stream
Spring
5 CVEs0 on KEV0 new
SF8.1
Spring for Apache Kafka
Spring
5 CVEs0 on KEV0 new
MI7.5
Micrometer
Spring
4 CVEs0 on KEV0 new
SB9.8
Spring Batch
Spring
4 CVEs0 on KEV0 new
SD7.5
Spring Data Commons
Spring
4 CVEs0 on KEV0 new
RC7.5
Reactor Core
Spring
2 CVEs0 on KEV0 new
SA8.2
Spring Authorization Server
Spring
2 CVEs0 on KEV0 new
SC8.7
Spring Cloud Gateway
Spring
2 CVEs0 on KEV0 new
SD8.1
Spring Data MongoDB
Spring
2 CVEs0 on KEV0 new
SG8.8
Spring gRPC
Spring
2 CVEs0 on KEV0 new
SH7.5
Spring HATEOAS
Spring
2 CVEs0 on KEV0 new
ST8.0
Spring Tools for VSCode / Cursor / Theia
Spring
2 CVEs0 on KEV0 new
SW6.4
Spring Web Flow
Spring
2 CVEs0 on KEV0 new
MT5.3
Micrometer Tracing
Spring
1 CVEs0 on KEV0 new
SC7.6
Spring Cloud Commons
Spring
1 CVEs0 on KEV0 new
SC7.5
Spring Cloud Sleuth
Spring
1 CVEs0 on KEV0 new
SD4.8
Spring Data JDBC
Spring
1 CVEs0 on KEV0 new
SD6.5
Spring Data JPA
Spring
1 CVEs0 on KEV0 new
SD6.4
Spring Data KeyValue
Spring
1 CVEs0 on KEV0 new
SD4.8
Spring Data R2DBC
Spring
1 CVEs0 on KEV0 new
SD6.4
Spring Data Redis
Spring
1 CVEs0 on KEV0 new
SD4.8
Spring Data Relational
Spring
1 CVEs0 on KEV0 new
SF8.1
Spring for Apache Pulsar
Spring
1 CVEs0 on KEV0 new
SL7.4
Spring LDAP
Spring
1 CVEs0 on KEV0 new
SR5.9
Spring REST Docs
Spring
1 CVEs0 on KEV0 new
SR5.9
Spring Retry
Spring
1 CVEs0 on KEV0 new
SS6.5
Spring Security OAuth
Spring
1 CVEs0 on KEV0 new
SS8.8
Spring Statemachine
Spring
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-59324 | SI Spring Integration Spring | 8.2 | Aug 27 | fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction |
| CVE-2026-59322 | SI Spring Integration Spring | 6.3 | Aug 27 | EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders |
| CVE-2026-59321 | SI Spring Integration Spring | 5.4 | Aug 27 | Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check |
| CVE-2026-59320 | SA Spring AMQP Spring | 6.5 | Aug 27 | In Spring AMQP the link credit never replenished on listener exception path |
| CVE-2026-59319 | SA Spring AI Spring | 4.3 | Aug 27 | RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure |
| CVE-2026-59317 | SF Spring for Apache Kafka Spring | 6.5 | Aug 27 | In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop |
| CVE-2026-59316 | SA Spring Authorization Server Spring | 8.2 | Aug 27 | Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS) |
| CVE-2026-59315 | SC Spring Cloud Config Spring | 5.3 | Aug 27 | Spring Cloud Config Monitor Denial of Service |
| CVE-2026-59314 | SF Spring Framework Spring | 3.7 | Aug 27 | Spring Framework response splitting in ContentDisposition |
| CVE-2026-59311 | SI Spring Integration Spring | 6.8 | Aug 27 | Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creation |
| CVE-2026-59306 | SC Spring Cloud Stream Spring | 3.8 | Aug 27 | Potential for deserialization of untrusted types in Spring Cloud Stream |
| CVE-2026-59313 | SF Spring Framework Spring | 9.8 | Aug 27 | Server Sent Event stream corruption in Spring MVC functional web framework |
| CVE-2026-59307 | SI Spring Integration Spring | 8.0 | Aug 27 | Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference |
| CVE-2026-59305 | SC Spring Cloud Stream Spring | 3.8 | Aug 27 | Partition interceptor may be improperly added while sending message |
| CVE-2026-59304 | SC Spring Cloud Stream Spring | 3.8 | Aug 27 | Improper caching of the original content type in Spring Cloud Stream Avro |
| CVE-2026-59303 | SC Spring Cloud Stream Spring | 3.8 | Aug 27 | Dynamic destination cache size is not properly bound in Spring Cloud Stream |
| CVE-2026-59302 | SC Spring Cloud Stream Spring | 4.9 | Aug 27 | Potential for logging sensitive data in Spring Cloud Stream |
| CVE-2026-59301 | SC Spring Cloud Function Spring | 4.9 | Aug 27 | Potential for logging sensitive data in Spring Cloud Function Azure |
| CVE-2026-59300 | SC Spring Cloud Function Spring | 3.5 | Aug 27 | Potential for logging sensitive data in Spring Cloud Function AWS |
| CVE-2026-59299 | SC Spring Cloud Function Spring | 3.5 | Aug 27 | Composition lookup can potentially poison base function in Spring Cloud Function |
| CVE-2026-59298 | SC Spring Cloud Function Spring | 3.5 | Aug 27 | Potential for improper filtering of HTTP headers in Spring Cloud Function |
| CVE-2026-59297 | SC Spring Cloud Function Spring | 3.5 | Aug 27 | Spring Cloud Function can incorrectly determine if URI is secure |
| CVE-2026-59294 | SA Spring AI Spring | 6.5 | Aug 27 | Arbitrary File Write via Path Traversal in ResourceCacheService |
| CVE-2026-59293 | SI Spring Integration Spring | 6.6 | Aug 27 | SMB minimum protocol dialect defaults to SMB1 |
| CVE-2026-59292 | SI Spring Integration Spring | 3.2 | Aug 27 | World-readable metadata file in PropertiesPersistingMetadataStore (insecure temp-file permissions) |
| CVE-2026-59291 | SC Spring Cloud Function Spring | 5.5 | Aug 27 | Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function |
| CVE-2026-59289 | SF Spring for GraphQL Spring | 7.5 | Aug 27 | Spring for GraphQL Denial of Service via pagination support |
| CVE-2026-59288 | SF Spring for GraphQL Spring | 7.4 | Aug 27 | Spring for GraphQL Information Exposure in GraphiQL support |
| CVE-2026-59287 | SF Spring for GraphQL Spring | 5.9 | Aug 27 | Spring for GraphQL WebSocket Client Denial of Service |
| CVE-2026-59286 | SF Spring for GraphQL Spring | 8.1 | Aug 27 | Spring for GraphQL loads Untrusted Resources in GraphiQL support |
| CVE-2026-59285 | SF Spring for GraphQL Spring | 8.1 | Aug 27 | Spring for GraphQL Unsafe Deserialization in pagination support |
| CVE-2026-59284 | SC Spring Cloud Commons Spring | 7.6 | Aug 27 | Spring Cloud Commons no allow list for writable env actuator endpoint |
| CVE-2026-59283 | SF Spring Framework Spring | 9.1 | Aug 27 | Spring Framework Safety Guard Bypass via SpEL Expression Compilation |
| CVE-2026-59282 | SF Spring Framework Spring | 7.5 | Aug 27 | Spring Framework Denial of Service via Unbounded List Growth in Data Binding |
| CVE-2026-59281 | SF Spring Framework Spring | 6.1 | Aug 27 | Spring Framework Cross-site Scripting via EscapedErrors |
| CVE-2026-59277 | SS Spring Security Spring | 5.3 | Aug 27 | Spring Security InetAddressMatchers Incomplete Internal Network Classification |
| CVE-2026-59276 | SS Spring Security Spring | 5.9 | Aug 27 | Timing Attack via Non-Constant-Time Comparison of Sensitive Values |
| CVE-2026-59280 | SF Spring Framework Spring | 4.3 | Aug 27 | Spring Framework Path Traversal via Backslash in SpringTemplateLoader |
| CVE-2026-59272 | SA Spring AMQP Spring | 6.8 | Aug 27 | Log4j2 AmqpAppender disables TLS hostname verification by default |
| CVE-2026-47893 | SF Spring Framework Spring | 7.5 | Aug 27 | Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService |
| CVE-2026-47892 | SF Spring Framework Spring | 9.8 | Aug 27 | Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints |
| CVE-2026-47891 | SF Spring Framework Spring | 9.8 | Aug 27 | Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder |
| CVE-2026-47890 | SF Spring Framework Spring | 9.8 | Aug 27 | Spring Framework Server Sent Event stream corruption while rendering fragments |
| CVE-2026-47889 | SF Spring Framework Spring | 7.5 | Aug 27 | Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse |
| CVE-2026-47888 | SF Spring Framework Spring | 7.5 | Aug 27 | Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler |
| CVE-2026-47887 | SF Spring Framework Spring | 6.1 | Aug 27 | Spring Framework Open Redirect in UrlFileNameViewController |
| CVE-2026-47886 | SF Spring Framework Spring | 7.5 | Aug 27 | Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions |
| CVE-2026-47885 | SF Spring Framework Spring | 7.5 | Aug 27 | Spring Framework maxPartSize Ignored in PartEventHttpMessageReader |
| CVE-2026-47884 | SF Spring Framework Spring | 9.8 | Aug 27 | Spring Framework Improper Path Limitation in XsltView |
| CVE-2026-47883 | SF Spring Framework Spring | 6.1 | Aug 27 | Spring Framework Open Redirect in UrlHandlerFilter |
| CVE-2026-59278 | SF Spring for Apache Kafka Spring | 6.5 | Aug 27 | In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages |
| CVE-2026-59275 | SA Spring AMQP Spring | 4.9 | Aug 27 | Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99) |
| CVE-2026-59274 | SI Spring Integration Spring | 6.5 | Aug 27 | Unbounded decompression in UnZipTransformer enables zip-bomb DoS |
| CVE-2026-59271 | SA Spring AMQP Spring | 6.5 | Aug 27 | Admin password disclosed in BrokerNotAliveException message |
| CVE-2026-59270 | SS Spring Security Spring | 9.1 | Aug 27 | Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces |
| CVE-2026-47894 | SC Spring Cloud Config Spring | 7.5 | Aug 27 | Spring Cloud Config Server Native Environment Repository Exposure |
| CVE-2026-47881 | SB Spring Batch Spring | 7.5 | Aug 27 | Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File |
| CVE-2026-47880 | SI Spring Integration Spring | 5.4 | Aug 27 | DefaultJmsHeaderMapper copies all JMS user properties into MessageHeaders without excluding framework-significant names |
| CVE-2026-47879 | SC Spring Cloud Gateway Spring | 8.7 | Aug 27 | Spring Cloud Gateway SSRF and native file access with gRPC |
| CVE-2026-47878 | SB Spring Batch Spring | 7.3 | Aug 27 | Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist |