High
CVE-2026-40993
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
Medium
CVE-2026-41697
Spring Data Relational: Attackers can supply wildcard characters to perform boolean-based blind data inference
Medium
CVE-2026-41701
Spring AMQP Has Predictable Correlation IDs in RabbitTemplate.sendAndReceive() with Fixed Reply Queue
Medium
CVE-2026-41714
Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBean
Medium
CVE-2026-41696
Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods
Low
CVE-2026-41694
Spring Security SAML2 Service Provider: Decryption Oracle Vulnerability from Unsigned SAML Response and Logout Payloads
Medium
CVE-2026-41008
Spring Security OAuth2 Authorization Server: Authorization endpoint performs insufficient validation of the request_uri parameter
High
CVE-2026-41717
Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection
High
CVE-2026-40988
Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)
Medium
CVE-2026-40991
Spring REST Docs REST Assured & WebFlux are vulnerable to Improper Restriction of XML External Entity Reference
Medium
CVE-2026-41853
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux
Medium
CVE-2026-41851
Spring Framework Denial of Service via Unbounded Cache in SpEL
High
CVE-2026-41850
Spring Framework Algorithmic Denial of Service via SpEL Expressions
Low
CVE-2026-41852
Spring Framework Arbitrary Method Invocation in SpEL Expressions
Medium
CVE-2026-41846
Spring Framework Cross-site Scripting via JSP Form Tags
Low
CVE-2026-41848
Spring Framework Denial of Service via AntPathMatcher
High
CVE-2026-41855
Spring Framework Unsafe Deserialization via Jackson JMS Converters
Medium
CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Medium
CVE-2026-41847
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL
High
CVE-2026-41849
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions
Medium
CVE-2026-41841
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
High
CVE-2026-41720
Spring LDAP has Authentication Bypass with Empty Password
Medium
CVE-2026-41840
Spring Framework Denial of Service via Multipart Requests in WebFlux
High
CVE-2026-41845
Spring Framework Cross-site Scripting via JavaScriptUtils
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.