Alta
CVE-2026-41003
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Alta
CVE-2026-40993
Spring Security SAML2 Service Provider is vulnerable to Deserialization of Untrusted Data via JdbcAssertingPartyMetadataRepository
Media
CVE-2026-41697
Spring Data Relational: Attackers can supply wildcard characters to perform boolean-based blind data inference
Media
CVE-2026-41701
Spring AMQP Has Predictable Correlation IDs in RabbitTemplate.sendAndReceive() with Fixed Reply Queue
Media
CVE-2026-41714
Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBean
Media
CVE-2026-41696
Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods
Baja
CVE-2026-41694
Spring Security SAML2 Service Provider: Decryption Oracle Vulnerability from Unsigned SAML Response and Logout Payloads
Media
CVE-2026-41008
Spring Security OAuth2 Authorization Server: Authorization endpoint performs insufficient validation of the request_uri parameter
Alta
CVE-2026-41717
Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection
Alta
CVE-2026-40988
Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)
Media
CVE-2026-40991
Spring REST Docs REST Assured & WebFlux are vulnerable to Improper Restriction of XML External Entity Reference
Media
CVE-2026-41853
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux
Media
CVE-2026-41851
Spring Framework Denial of Service via Unbounded Cache in SpEL
Alta
CVE-2026-41850
Spring Framework Algorithmic Denial of Service via SpEL Expressions
Baja
CVE-2026-41852
Spring Framework Arbitrary Method Invocation in SpEL Expressions
Media
CVE-2026-41846
Spring Framework Cross-site Scripting via JSP Form Tags
Baja
CVE-2026-41848
Spring Framework Denial of Service via AntPathMatcher
Alta
CVE-2026-41855
Spring Framework Unsafe Deserialization via Jackson JMS Converters
Media
CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Media
CVE-2026-41847
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL
Alta
CVE-2026-41849
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions
Media
CVE-2026-41841
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
Alta
CVE-2026-41720
Spring LDAP has Authentication Bypass with Empty Password
Media
CVE-2026-41840
Spring Framework Denial of Service via Multipart Requests in WebFlux
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.