Critical
CVE-2026-47892
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filters
Critical
CVE-2026-47890
Spring Framework Server Sent Event stream corruption while rendering fragments
Medium
CVE-2026-41853
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux
Medium
CVE-2026-41847
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL
Medium
CVE-2026-41841
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
Medium
CVE-2026-41840
Spring Framework Denial of Service via Multipart Requests in WebFlux
High
CVE-2026-41842
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux
Medium
CVE-2026-41844
Spring Framework Open Redirect in Spring MVC and WebFlux
Medium
CVE-2026-41843
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
Medium
CVE-2026-41839
Spring Framework Escalation via Session Fixation in WebFlux
Low
CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
Medium
CVE-2026-22745
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources
Medium
CVE-2026-22740
Spring Framework DoS with Multipart Temp Files in WebFlux
Low
CVE-2026-22735
Spring MVC and WebFlux has Server Sent Event stream corruption
Medium
CVE-2026-22737
Spring Framework Improper Path Limitation with Script View Templates
High
CVE-2024-38819
Spring Framework Path Traversal vulnerability
High
CVE-2024-38816
Path traversal vulnerability in functional web frameworks
Critical
Exploited in attacks
CVE-2022-22965
Remote Code Execution in Spring Framework
Medium
CVE-2020-5397
CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux
High
CVE-2020-5398
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.