Low
CVE-2026-41848
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 19
Reset filters
High
CVE-2025-41249
Spring Framework annotation detection mechanism may result in improper authorization
High
CVE-2024-22233
Spring Framework server Web DoS Vulnerability
Medium
CVE-2021-22096
Improper Output Neutralization for Logs in Spring Framework
High
CVE-2011-2730
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
Medium
CVE-2011-2894
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data
Medium
CVE-2014-3578
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
Medium
CVE-2009-1190
Spring Framework Inefficient Regular Expression Complexity
Medium
CVE-2021-22060
Log entry injection in Spring Framework
High
CVE-2018-15756
Denial of Service in Spring Framework
High
CVE-2016-5007
Spring Security and Spring Framework may not recognize certain paths that should be protected
High
CVE-2015-5211
Files or Directories Accessible to External Parties in org.springframework:spring-core
Medium
CVE-2015-0201
Moderate severity vulnerability that affects org.springframework:spring-core
High
CVE-2018-1272
Possible privilege escalation in org.springframework:spring-core
Medium
CVE-2018-1271
Path Traversal in org.springframework:spring-core
High
CVE-2018-1258
Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass
Medium
CVE-2018-1257
Denial of Service in org.springframework:spring-core
Medium
CVE-2018-1199
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Medium
CVE-2018-11040
Moderate severity vulnerability that affects org.springframework:spring-core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.