High
CVE-2025-53114
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
Medium
CVE-2026-53438
Jenkins: Missing permission check allows unauthorized cancellation of queue items
Medium
CVE-2026-53442
Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations
Medium
CVE-2026-53437
Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL
Medium
CVE-2026-53436
Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
Medium
CVE-2026-53439
Jenkins exposes other users' timezone and view names to users with Overall/Read permission
High
CVE-2026-53435
Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation
Medium
CVE-2026-53440
Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"
High
CVE-2026-53441
Jenkins: Stored XSS vulnerability in node offline cause description
Medium
CVE-2026-47838
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
Medium
CVE-2026-41721
Spring Data Commons: Denial of Service via excessive memory allocation in projection binding
Medium
CVE-2026-41719
Spring Data KeyValue: Remote code execution via SpEL Injection in Sort-based repository queries
Medium
CVE-2026-41730
Spring Data REST potentially exposes persistence-layer internals to HTTP clients
Medium
CVE-2026-41727
Spring for Apache Kafka: Improper Validation of Retry Topic Header Values Leads to Retry Sequence Manipulation
High
CVE-2026-41732
Spring for Apache Pulsar: JsonPulsarHeaderMapper Trusted-Package Prefix Check Allows Unintended Subpackage Deserialization
High
CVE-2026-41728
Spring Data REST has Improper Access Control in its JSON Patch Implementation
High
CVE-2026-41729
Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch requests
Medium
CVE-2026-41837
Spring Data REST Querydsl Integration Exposes Persistent Property Paths, Bypassing Jackson Customizations
Medium
CVE-2026-41726
In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header
High
CVE-2026-41731
In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization
Medium
CVE-2026-41711
Spring Data Commons: StackOverflowException when parsing Sort parameters (DoS)
Medium
CVE-2026-41706
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache
High
CVE-2026-41716
Spring Data Commons: Heap exhaustion from unbounded property-lookup cache retaining crafted string keys
High
CVE-2026-41003
Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.