Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Open RedirectCVE-2026-41008
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [,1.5.8)[2.0.0-M1,7.0.6)
Has fix
MavenPublished 12 Jun 2026
  • C
Improper Input ValidationCVE-2026-22752
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [1.3.0,1.5.7)[7.0.0-M3,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • M
Improper AuthenticationCVE-2024-22258
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [,1.0.6)[1.1.0,1.1.6)[1.2.0,1.2.3)
Has fix
MavenPublished 20 Mar 2024
  • M
Authorization BypassCVE-2024-38827
Affects org.springframework.security:spring-security-oauth2-client | Versions [,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
Has fix
MavenPublished 20 Nov 2024
  • H
Authentication BypassCVE-2024-22234
Affects org.springframework.security:spring-security-oauth2-client | Versions [6.1.0,6.1.7)[6.2.0,6.2.2)
Has fix
MavenPublished 20 Feb 2024
  • H
Privilege EscalationCVE-2022-31690
Affects org.springframework.security:spring-security-oauth2-client | Versions [,5.4.11)[5.6.0,5.6.9)[5.7.0,5.7.5)
Has fix
MavenPublished 1 Nov 2022
  • M
Denial of Service (DoS)CVE-2021-22119
Affects org.springframework.security:spring-security-oauth2-client | Versions [5.5.0, 5.5.1)[5.4.0, 5.4.7)[5.3.0.RELEASE, 5.3.10.RELEASE)[5.2.0.RELEASE, 5.2.11.RELEASE)
Has fix
MavenPublished 28 Jun 2021
  • C
Replay AttackCVE-2026-41707
Affects org.springframework.security:spring-security-oauth2-jose | Versions [6.5.0, 7.0.7)[7.1.0, 7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Insufficient Verification of Data AuthenticityCVE-2026-22748
Affects org.springframework.security:spring-security-oauth2-jose | Versions [,6.5.10)[7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • M
Authorization BypassCVE-2018-15801
Affects org.springframework.security:spring-security-oauth2-jose | Versions [5.1.0,5.1.2.RELEASE)
Has fix
MavenPublished 20 Dec 2018
  • H
Improper Handling of Highly Compressed Data (Data Amplification)CVE-2026-40988
Affects org.springframework.security:spring-security-saml2-service-provider | Versions [,6.5.11)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 12 Jun 2026
  • M
Cross-site Scripting (XSS)CVE-2026-41003
Affects org.springframework.security:spring-security-saml2-service-provider | Versions [,6.5.11)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 12 Jun 2026
  • M
Information ExposureCVE-2026-41694
Affects org.springframework.security:spring-security-saml2-service-provider | Versions [, 6.5.11)[7.0.0-M1, 7.0.6)
Has fix
MavenPublished 11 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-40993
Affects org.springframework.security:spring-security-saml2-service-provider | Versions [7.0.0, 7.0.6)
Has fix
MavenPublished 11 Jun 2026
  • H
Authentication BypassCVE-2020-5407
Affects org.springframework.security:spring-security-saml2-service-provider | Versions [5.3.0.RELEASE,5.3.2.RELEASE)[5.2.0.RELEASE,5.2.4.RELEASE)
Has fix
MavenPublished 13 May 2020
  • M
Authorization BypassCVE-2024-38827
Affects org.springframework.security:spring-security-taglibs | Versions [,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
Has fix
MavenPublished 20 Nov 2024
  • M
Open RedirectCVE-2026-41706
Affects org.springframework.security:spring-security-web | Versions [,6.5.11)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 12 Jun 2026
  • H
User ImpersonationCVE-2026-47838
Affects org.springframework.security:spring-security-web | Versions [, 6.5.11)
Has fix
MavenPublished 11 Jun 2026
  • H
User ImpersonationCVE-2026-22747
Affects org.springframework.security:spring-security-web | Versions [7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • C
Use of Cache Containing Sensitive InformationCVE-2026-22732
Affects org.springframework.security:spring-security-web | Versions [3.2.8,6.5.9)[7.0.0-M1,7.0.4)
Has fix
MavenPublished 20 Mar 2026
  • M
Authorization BypassCVE-2024-38827
Affects org.springframework.security:spring-security-web | Versions [,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
Has fix
MavenPublished 20 Nov 2024
  • C
Missing AuthorizationCVE-2024-38821
Affects org.springframework.security:spring-security-web | Versions [,5.7.13)[5.8.0,5.8.15)[6.0.0,6.2.7)[6.3.0,6.3.4)
Has fix
MavenPublished 28 Oct 2024
  • H
Authentication BypassCVE-2024-22234
Affects org.springframework.security:spring-security-web | Versions [6.1.0,6.1.7)[6.2.0,6.2.2)
Has fix
MavenPublished 20 Feb 2024
  • M
Session FixationCVE-2023-20862
Affects org.springframework.security:spring-security-web | Versions [5.7.0,5.7.8)[5.8.0,5.8.3)[6.0.0,6.0.3)
Has fix
MavenPublished 20 Apr 2023
  • H
Authorization BypassCVE-2022-31692
Affects org.springframework.security:spring-security-web | Versions [5.6.0, 5.6.9)[5.7.0, 5.7.5)
Has fix
MavenPublished 1 Nov 2022
  • H
Authorization BypassCVE-2022-22978
Affects org.springframework.security:spring-security-web | Versions [,5.4.11)[5.5.0,5.5.7)[5.6.0,5.6.4)
Has fix
MavenPublished 18 May 2022
  • M
Access Restriction BypassCVE-2018-1199
Affects org.springframework.security:spring-security-web | Versions [4.1.0.RELEASE, 4.1.5.RELEASE)[4.2.0.RELEASE, 4.2.4.RELEASE)[5.0.0.RELEASE, 5.0.3.RELEASE)
Has fix
MavenPublished 17 Mar 2018
  • H
Security BypassCVE-2016-9879
Affects org.springframework.security:spring-security-web | Versions [3.2.0.RELEASE,3.2.10.RELEASE)[4.0.0.RELEASE,4.1.4.RELEASE)[4.2.0.RELEASE,4.2.1.RELEASE)
Has fix
MavenPublished 28 Dec 2016
  • H
Authentication BypassCVE-2016-5007
Affects org.springframework.security:spring-security-web | Versions [3.2.0.RELEASE,4.1.1.RELEASE)
Has fix
MavenPublished 11 Jul 2016
  • M
Access Restriction BypassCVE-2010-3700
Affects org.springframework.security:spring-security-web | Versions [3.0.0.RELEASE,3.0.4.RELEASE)
Has fix
MavenPublished 10 Jun 2015