Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59283
Affects org.springframework:spring-expression | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47886
Affects org.springframework:spring-expression | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41851
Affects org.springframework:spring-expression | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 27 Jul 2026
  • H
Integer Overflow or WraparoundCVE-2026-41849
Affects org.springframework:spring-expression | Versions [5.3.0,6.0.0)
Has fix
MavenPublished 9 Jun 2026
  • M
Exposed Dangerous Method or FunctionCVE-2026-41852
Affects org.springframework:spring-expression | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • H
Inefficient Algorithmic ComplexityCVE-2026-41850
Affects org.springframework:spring-expression | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2024-38808
Affects org.springframework:spring-expression | Versions [5.3.0,5.3.39)
Has fix
MavenPublished 15 Aug 2024
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2023-20863
Affects org.springframework:spring-expression | Versions [,5.2.24.RELEASE)[5.3.0,5.3.27)[6.0.0,6.0.8)
Has fix
MavenPublished 14 Apr 2023
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2023-20861
Affects org.springframework:spring-expression | Versions [,5.2.23.RELEASE)[5.3.0,5.3.26)[6.0.0,6.0.7)
Has fix
MavenPublished 23 Mar 2023
  • M
Denial of Service (DoS)CVE-2022-22950
Affects org.springframework:spring-expression | Versions [,5.2.20.RELEASE)[5.3.0,5.3.17)
Has fix
MavenPublished 29 Mar 2022
  • C
Deserialization of Untrusted DataCVE-2026-41855
Affects org.springframework:spring-jms | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • L
Denial of Service (DoS)
Affects org.springframework:spring-jms | Versions [3.2.11.RELEASE,3.2.14.RELEASE)[4.0.7.RELEASE,4.1.7.RELEASE)
Has fix
MavenPublished 6 Nov 2015
  • M
Missing Release of Resource after Effective LifetimeCVE-2026-47888
Affects org.springframework:spring-messaging | Versions [5.2.0,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Denial of Service (DoS)CVE-2022-22971
Affects org.springframework:spring-messaging | Versions [,5.2.22.RELEASE)[5.3.0,5.3.20)
Has fix
MavenPublished 12 May 2022
  • M
Regular Expression Denial of Service (ReDoS)CVE-2018-1257
Affects org.springframework:spring-messaging | Versions [4.3.0.RELEASE,4.3.17.RELEASE)[5.0.0.RELEASE,5.0.6.RELEASE)
Has fix
MavenPublished 10 May 2018
  • C
Arbitrary Code ExecutionCVE-2018-1275
Affects org.springframework:spring-messaging | Versions [,4.3.16.RELEASE)[5.0.0.RELEASE, 5.0.5.RELEASE)
Has fix
MavenPublished 16 Apr 2018
  • C
Arbitrary Code ExecutionCVE-2018-1270
Affects org.springframework:spring-messaging | Versions [,4.3.16.RELEASE)[5.0.0.RELEASE,5.0.5.RELEASE)
Has fix
MavenPublished 9 Apr 2018
  • M
Denial of Service (DoS)CVE-2015-3192
Affects org.springframework:spring-oxm | Versions [3.2.0.RELEASE, 3.2.14.RELEASE)[4.0.0.RELEASE, 4.1.7.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • H
XML External Entity (XXE) InjectionCVE-2014-0225
Affects org.springframework:spring-oxm | Versions [3.0.0.RELEASE,3.2.9.RELEASE)[4.0.0.RELEASE,4.0.5.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
XML External Entity (XXE) InjectionCVE-2013-4152
Affects org.springframework:spring-oxm | Versions [3.0.0.RELEASE,3.2.3.RELEASE)[4.0.0.RELEASE,4.0.1.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • H
Sensitive Cookie in HTTPS Session Without "Secure" AttributeCVE-2026-47889
Affects org.springframework:spring-web | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Cross-site Scripting (XSS)CVE-2026-59281
Affects org.springframework:spring-web | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47885
Affects org.springframework:spring-web | Versions [6.1.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
HTTP Response SplittingCVE-2026-59314
Affects org.springframework:spring-web | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-41845
Affects org.springframework:spring-web | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-41854
Affects org.springframework:spring-web | Versions [6.2.0, 6.2.19)[7.0.0-M1, 7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • H
Incomplete CleanupCVE-2026-22740
Affects org.springframework:spring-web | Versions [,6.2.18)[7.0.0-M1,7.0.7)
Has fix
MavenPublished 21 Apr 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-22735
Affects org.springframework:spring-web | Versions [,6.2.17)[7.0.0,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • M
HTTP Response SplittingCVE-2025-41234
Affects org.springframework:spring-web | Versions [6.0.5,6.1.21)[6.2.0,6.2.8)
Has fix
MavenPublished 13 Jun 2025
  • L
Improper Handling of Case SensitivityCVE-2024-38820
Affects org.springframework:spring-web | Versions [,6.1.14)
Has fix
MavenPublished 18 Oct 2024