Spring Spring Framework vulnerabilities

CVEs per yearBy the year they were published

1. 20202
2. 20231
3. 20245
4. 20251
5. 202636

Newest CVEs

• CVE-2026-59314

  Spring Framework response splitting in ContentDisposition

  Spring · Spring Framework

  Low3.7
• CVE-2026-59313

  Server Sent Event stream corruption in Spring MVC functional web framework

  Spring · Spring Framework

  Critical9.8
• CVE-2026-59283

  Spring Framework Safety Guard Bypass via SpEL Expression Compilation

  Spring · Spring Framework

  Critical9.1
• CVE-2026-59282

  Spring Framework Denial of Service via Unbounded List Growth in Data Binding

  Spring · Spring Framework

  High7.5
• CVE-2026-59281

  Spring Framework Cross-site Scripting via EscapedErrors

  Spring · Spring Framework

  Medium6.1
• CVE-2026-59280

  Spring Framework Path Traversal via Backslash in SpringTemplateLoader

  Spring · Spring Framework

  Medium4.3
• CVE-2026-47893

  Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService

  Spring · Spring Framework

  High7.5
• CVE-2026-47892

  Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

  Spring · Spring Framework

  Critical9.8
• CVE-2026-47891

  Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder

  Spring · Spring Framework

  Critical9.8
• CVE-2026-47890

  Spring Framework Server Sent Event stream corruption while rendering fragments

  Spring · Spring Framework

  Critical9.8