Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-82265 |
|
Vulnerability in spring (CVE-2026-82265)
vulnerability in spring (CVE-2026-82265). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59314 |
|
Vulnerability in spring (CVE-2026-59314)
vulnerability in spring (CVE-2026-59314). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59313 |
|
Vulnerability in spring (CVE-2026-59313)
vulnerability in spring (CVE-2026-59313). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59283 |
|
Vulnerability in spring (CVE-2026-59283)
vulnerability in spring (CVE-2026-59283). Data can be tampered with by attackers.
|
| CVE-2026-59282 |
|
Vulnerability in spring (CVE-2026-59282)
vulnerability in spring (CVE-2026-59282). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59281 |
|
Cross-Site Scripting (XSS) in spring (CVE-2026-59281)
cross-site scripting in spring (CVE-2026-59281). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59280 |
|
Path Traversal in spring (CVE-2026-59280)
path traversal in spring (CVE-2026-59280). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47893 |
|
Vulnerability in spring (CVE-2026-47893)
vulnerability in spring (CVE-2026-47893). Confidential information can be exposed externally.
|
| CVE-2026-47885 |
|
Vulnerability in spring (CVE-2026-47885)
vulnerability in spring (CVE-2026-47885). Data can be tampered with by attackers.
|
| CVE-2026-47883 |
|
Open Redirect in spring (CVE-2026-47883)
vulnerability in spring (CVE-2026-47883). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47886 |
|
Vulnerability in spring (CVE-2026-47886)
vulnerability in spring (CVE-2026-47886). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47889 |
|
Vulnerability in spring (CVE-2026-47889)
vulnerability in spring (CVE-2026-47889). Confidential information can be exposed externally.
|
| CVE-2026-47892 |
|
Authorization Flaw in spring (CVE-2026-47892)
vulnerability in spring (CVE-2026-47892). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47888 |
|
Vulnerability in spring (CVE-2026-47888)
vulnerability in spring (CVE-2026-47888). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47884 |
|
Path Traversal in spring (CVE-2026-47884)
path traversal in spring (CVE-2026-47884). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47890 |
|
Vulnerability in spring (CVE-2026-47890)
vulnerability in spring (CVE-2026-47890). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47887 |
|
Open Redirect in spring (CVE-2026-47887)
vulnerability in spring (CVE-2026-47887). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47891 |
|
Vulnerability in spring (CVE-2026-47891)
vulnerability in spring (CVE-2026-47891). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47852 |
|
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a...
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a...
|
| CVE-2026-47851 |
|
Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError...
Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError...
|
| CVE-2026-59323 |
|
Vulnerability in spring (CVE-2026-59323)
vulnerability in spring (CVE-2026-59323). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73243 |
|
SSRF (Server-Side Request Forgery) in spring (CVE-2026-73243)
SSRF in spring (CVE-2026-73243). Risk of unauthorized operations or information disclosure. Exploitable via `GET /addTask`.
|
| CVE-2026-73244 |
|
Path Traversal in spring (CVE-2026-73244)
path traversal in spring (CVE-2026-73244). Risk of unauthorized operations or information disclosure. Exploitable via `POST /listFiles`.
|
| CVE-2026-47882 |
|
Vulnerability in spring (CVE-2026-47882)
vulnerability in spring (CVE-2026-47882). Successful exploitation can lead to full system takeover.
|
| CVE-2026-47858 |
|
Vulnerability in spring (CVE-2026-47858)
vulnerability in spring (CVE-2026-47858). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59328 |
|
Cross-Site Scripting (XSS) in spring (CVE-2026-59328)
cross-site scripting in spring (CVE-2026-59328). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59326 |
|
Vulnerability in spring (CVE-2026-59326)
vulnerability in spring (CVE-2026-59326). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59327 |
|
Vulnerability in spring (CVE-2026-59327)
vulnerability in spring (CVE-2026-59327). Confidential information can be exposed externally.
|
| CVE-2026-62242 |
|
SSRF (Server-Side Request Forgery) in spring (CVE-2026-62242)
SSRF in spring (CVE-2026-62242). Confidential information can be exposed externally.
|
| CVE-2026-50201 |
|
Privilege Escalation in Steeltoe.Management.Endpoint (CVE-2026-50201)
vulnerability in Steeltoe.Management.Endpoint (CVE-2026-50201). Confidential information can be exposed externally. Exploitable via ``EndpointPermissions.Restricted``. Mitigation: upgrade to `4.2.0` or later.
|
| CVE-2026-47835 |
|
Vulnerability in CVE-2026-47835 (CVE-2026-47835)
vulnerability in CVE-2026-47835 (CVE-2026-47835). Confidential information can be exposed externally.
|
| CVE-2026-41708 |
|
Vulnerability in dos (CVE-2026-41708)
vulnerability in dos (CVE-2026-41708). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41001 |
|
Vulnerability in org.springframework.boot:spring-boot-autoconfigure (CVE-2026-41001)
vulnerability in org.springframework.boot:spring-boot-autoconfigure (CVE-2026-41001). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40992 |
|
Vulnerability in org.springframework.boot:spring-boot-starter-mail (CVE-2026-40992)
vulnerability in org.springframework.boot:spring-boot-starter-mail (CVE-2026-40992). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41855 |
|
Unsafe Deserialization in spring (CVE-2026-41855)
vulnerability in spring (CVE-2026-41855). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41854 |
|
SSRF (Server-Side Request Forgery) in org.springframework:spring-web (CVE-2026-41854)
SSRF in org.springframework:spring-web (CVE-2026-41854). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.2.19` or later.
|
| CVE-2026-41853 |
|
Vulnerability in org.springframework:spring-webmvc (CVE-2026-41853)
vulnerability in org.springframework:spring-webmvc (CVE-2026-41853). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41852 |
|
Authorization Flaw in org.springframework:spring-expression (CVE-2026-41852)
vulnerability in org.springframework:spring-expression (CVE-2026-41852). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41851 |
|
Vulnerability in org.springframework:spring-expression (CVE-2026-41851)
vulnerability in org.springframework:spring-expression (CVE-2026-41851). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41850 |
|
Vulnerability in org.springframework:spring-expression (CVE-2026-41850)
vulnerability in org.springframework:spring-expression (CVE-2026-41850). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41849 |
|
Vulnerability in org.springframework:spring-expression (CVE-2026-41849)
vulnerability in org.springframework:spring-expression (CVE-2026-41849). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41847 |
|
Vulnerability in org.springframework:spring-webflux (CVE-2026-41847)
vulnerability in org.springframework:spring-webflux (CVE-2026-41847). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41841 |
|
Vulnerability in org.springframework:spring-webmvc (CVE-2026-41841)
vulnerability in org.springframework:spring-webmvc (CVE-2026-41841). Confidential information can be exposed externally.
|
| CVE-2026-41842 |
|
Vulnerability in org.springframework:spring-webmvc (CVE-2026-41842)
vulnerability in org.springframework:spring-webmvc (CVE-2026-41842). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41843 |
|
Path Traversal in org.springframework:spring-webmvc (CVE-2026-41843)
path traversal in org.springframework:spring-webmvc (CVE-2026-41843). Confidential information can be exposed externally.
|
| CVE-2026-41844 |
|
Open Redirect in org.springframework:spring-webmvc (CVE-2026-41844)
vulnerability in org.springframework:spring-webmvc (CVE-2026-41844). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41845 |
|
Cross-Site Scripting (XSS) in org.springframework:spring-webmvc (CVE-2026-41845)
cross-site scripting in org.springframework:spring-webmvc (CVE-2026-41845). Confidential information can be exposed externally.
|
| CVE-2026-41848 |
|
Vulnerability in org.springframework:spring-core (CVE-2026-41848)
vulnerability in org.springframework:spring-core (CVE-2026-41848). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41846 |
|
Cross-Site Scripting (XSS) in org.springframework:spring-webmvc (CVE-2026-41846)
cross-site scripting in org.springframework:spring-webmvc (CVE-2026-41846). Confidential information can be exposed externally.
|
| CVE-2026-41840 |
|
Vulnerability in org.springframework:spring-webflux (CVE-2026-41840)
vulnerability in org.springframework:spring-webflux (CVE-2026-41840). Risk of unauthorized operations or information disclosure.
|