Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-41845 |
|
Cross-Site Scripting (XSS) in org.springframework:spring-webmvc (CVE-2026-41845)
cross-site scripting in org.springframework:spring-webmvc (CVE-2026-41845). Confidential information can be exposed externally.
|
| CVE-2026-41846 |
|
Cross-Site Scripting (XSS) in org.springframework:spring-webmvc (CVE-2026-41846)
cross-site scripting in org.springframework:spring-webmvc (CVE-2026-41846). Confidential information can be exposed externally.
|
| CVE-2018-15756 |
|
Vulnerability in spring (CVE-2018-15756)
vulnerability in spring (CVE-2018-15756). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-1258 |
|
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauth...
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.
|