Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 436
CVE-2026-41841
Spring MVC and WebFlux applications are vulnerable to Information Disc ...
CVE-2026-41843
Spring MVC and WebFlux applications are vulnerable to Path Traversal a ...
CVE-2026-41842
Spring MVC and WebFlux applications are vulnerable to Denial of Servic ...
CVE-2026-41840
Spring WebFlux applications are vulnerable to Denial of Service (DoS) ...
CVE-2026-41849
An integer overflow vulnerability exists in the evaluation logic of th ...
CVE-2026-41846
Spring MVC applications which accept user-supplied values in the cssCl ...
CVE-2026-41850
Applications that evaluate user-supplied Spring Expression Language (S ...
CVE-2026-41855
In an untrusted JMS environment, org.springframework.jms.support.conve ...
CVE-2026-41838
IDs for WebSocket sessions in the spring-websocket module are not cryp ...
CVE-2026-41854
Due to incorrect host parsing, applications that rely on UriComponents ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2026-41841 Spring MVC and WebFlux applications are vulnerable to Information Disc ... | CVSS3: 5.9 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41843 Spring MVC and WebFlux applications are vulnerable to Path Traversal a ... | CVSS3: 5.9 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41842 Spring MVC and WebFlux applications are vulnerable to Denial of Servic ... | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41840 Spring WebFlux applications are vulnerable to Denial of Service (DoS) ... | CVSS3: 5.9 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41849 An integer overflow vulnerability exists in the evaluation logic of th ... | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41846 Spring MVC applications which accept user-supplied values in the cssCl ... | CVSS3: 6.1 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41850 Applications that evaluate user-supplied Spring Expression Language (S ... | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41855 In an untrusted JMS environment, org.springframework.jms.support.conve ... | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41838 IDs for WebSocket sessions in the spring-websocket module are not cryp ... | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-41854 Due to incorrect host parsing, applications that rely on UriComponents ... | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу