Spring Framework — универсальный фреймворк с открытым исходным кодом для Java-платформы.
Релизный цикл, информация об уязвимостях
График релизов
Количество 436
CVE-2026-47893
A Spring WebFlux application that supports WebSocket connections may e ...
CVE-2026-47884
Use of XsltView in a Spring MVC application can result in SSRF and RCE ...
CVE-2026-47888
A Spring RSocket application is exposed to a memory leak via a malform ...
CVE-2026-47891
A Spring WebFlux application that relies on the Aalto XML processor to ...
CVE-2026-59281
Spring MVC and WebFlux applications that obtain a data-binding Errors ...
CVE-2026-59283
Applications that evaluate Spring Expression Language (SpEL) expressio ...
CVE-2026-59282
Spring Framework applications that use Spring's data binding infrastru ...
CVE-2026-59280
Applications using Spring Framework's FreeMarker integration may be vu ...
CVE-2026-59313
Spring MVC applications using the functional web framework are vulnera ...
CVE-2026-59314
Applications that build a Content-Disposition header value from untrus ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2026-47893 A Spring WebFlux application that supports WebSocket connections may e ... | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-47884 Use of XsltView in a Spring MVC application can result in SSRF and RCE ... | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-47888 A Spring RSocket application is exposed to a memory leak via a malform ... | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-47891 A Spring WebFlux application that relies on the Aalto XML processor to ... | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-59281 Spring MVC and WebFlux applications that obtain a data-binding Errors ... | CVSS3: 6.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-59283 Applications that evaluate Spring Expression Language (SpEL) expressio ... | CVSS3: 9.1 | 1% Низкий | 2 месяца назад |
| CVE-2026-59282 Spring Framework applications that use Spring's data binding infrastru ... | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-59280 Applications using Spring Framework's FreeMarker integration may be vu ... | CVSS3: 4.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-59313 Spring MVC applications using the functional web framework are vulnera ... | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-59314 Applications that build a Content-Disposition header value from untrus ... | CVSS3: 3.7 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу