Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Direct Request ('Forced Browsing')CVE-2026-41841
Affects org.springframework:spring-webflux | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • M
Open RedirectCVE-2026-41844
Affects org.springframework:spring-webflux | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • H
Directory TraversalCVE-2026-41843
Affects org.springframework:spring-webflux | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • L
HTTP Request SmugglingCVE-2026-22741
Affects org.springframework:spring-webflux | Versions [,6.2.18)[7.0.0-M1, 7.0.7)
Has fix
MavenPublished 21 Apr 2026
  • H
Directory TraversalCVE-2026-22737
Affects org.springframework:spring-webflux | Versions [,6.2.17)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • H
Path TraversalCVE-2024-38819
Affects org.springframework:spring-webflux | Versions [,6.1.14)
Has fix
MavenPublished 18 Oct 2024
  • L
Improper Handling of Case SensitivityCVE-2024-38820
Affects org.springframework:spring-webflux | Versions [,6.1.14)
Has fix
MavenPublished 18 Oct 2024
  • H
Path TraversalCVE-2024-38816
Affects org.springframework:spring-webflux | Versions [,6.1.13)
Has fix
MavenPublished 13 Sept 2024
  • M
Improper Output Neutralization for LogsCVE-2021-22096
Affects org.springframework:spring-webflux | Versions [5.3.0,5.3.12)[,5.2.18)
Has fix
MavenPublished 27 Oct 2021
  • M
Cross-Site Request Forgery (CSRF)CVE-2020-5397
Affects org.springframework:spring-webflux | Versions [5.2.0, 5.2.3)
Has fix
MavenPublished 22 Jan 2020
  • L
Improper NeutralizationCVE-2026-59313
Affects org.springframework:spring-webmvc | Versions [5.3.0,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Open RedirectCVE-2026-47883
Affects org.springframework:spring-webmvc | Versions [6.2.0,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Open RedirectCVE-2026-47887
Affects org.springframework:spring-webmvc | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • C
Arbitrary Code InjectionCVE-2026-47884
Affects org.springframework:spring-webmvc | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47890
Affects org.springframework:spring-webmvc | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
HTTP Request SmugglingCVE-2026-41853
Affects org.springframework:spring-webmvc | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 27 Jul 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41842
Affects org.springframework:spring-webmvc | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • H
Direct Request ('Forced Browsing')CVE-2026-41841
Affects org.springframework:spring-webmvc | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • M
Open RedirectCVE-2026-41844
Affects org.springframework:spring-webmvc | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • H
Directory TraversalCVE-2026-41843
Affects org.springframework:spring-webmvc | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • M
Cross-site Scripting (XSS)CVE-2026-41846
Affects org.springframework:spring-webmvc | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • L
HTTP Request SmugglingCVE-2026-22741
Affects org.springframework:spring-webmvc | Versions [,6.2.18)[7.0.0-M1, 7.0.7)
Has fix
MavenPublished 21 Apr 2026
  • H
Directory TraversalCVE-2026-22737
Affects org.springframework:spring-webmvc | Versions [,6.2.17)[7.0.0-M1,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-22735
Affects org.springframework:spring-webmvc | Versions [,6.2.17)[7.0.0,7.0.6)
Has fix
MavenPublished 20 Mar 2026
  • M
Denial of Service (DoS)CVE-2024-38828
Affects org.springframework:spring-webmvc | Versions [,6.0.0)
Has fix
MavenPublished 19 Nov 2024
  • H
Path TraversalCVE-2024-38819
Affects org.springframework:spring-webmvc | Versions [,6.1.14)
Has fix
MavenPublished 18 Oct 2024
  • L
Improper Handling of Case SensitivityCVE-2024-38820
Affects org.springframework:spring-webmvc | Versions [,6.1.14)
Has fix
MavenPublished 18 Oct 2024
  • H
Path TraversalCVE-2024-38816
Affects org.springframework:spring-webmvc | Versions [,6.1.13)
Has fix
MavenPublished 13 Sept 2024
  • C
Improper Access ControlCVE-2023-20860
Affects org.springframework:spring-webmvc | Versions [5.3.0,5.3.26)[6.0.0,6.0.7)
Has fix
MavenPublished 23 Mar 2023
  • M
Cross-Site Request Forgery (CSRF)CVE-2020-5397
Affects org.springframework:spring-webmvc | Versions [5.2.0, 5.2.3)
Has fix
MavenPublished 22 Jan 2020