Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47881
Affects org.springframework.batch:spring-batch-infrastructure | Versions [4.3.0, 6.0.5)
Has fix
MavenPublished 26 Aug 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-47860
Affects org.springframework.amqp:spring-amqp | Versions [,4.0.5)[4.1.0,4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Certificate ValidationCVE-2026-59272
Affects org.springframework.amqp:spring-rabbit | Versions [,4.0.5)[4.1.0, 4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-47891
Affects org.springframework:spring-webflux | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Deserialization of Untrusted DataCVE-2026-47878
Affects org.springframework.batch:spring-batch-core | Versions [,6.0.5)
Has fix
MavenPublished 26 Aug 2026
  • M
Deserialization of Untrusted DataCVE-2026-47875
Affects org.springframework.batch:spring-batch-core | Versions [5.2.0, 6.0.5)
Has fix
MavenPublished 26 Aug 2026
  • M
Improper Enforcement of Behavioral WorkflowCVE-2026-47850
Affects org.springframework.data:spring-data-rest-core | Versions [,5.0.7)[5.1.0, 5.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
SQL InjectionCVE-2026-47834
Affects org.springframework.data:spring-data-jpa | Versions [3.0.0, 4.0.7)[4.1.0, 4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Deserialization of Untrusted DataCVE-2026-59278
Affects org.springframework.kafka:spring-kafka | Versions [,4.0.7)[4.1.0, 4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Check for Unusual or Exceptional ConditionsCVE-2026-59317
Affects org.springframework.kafka:spring-kafka | Versions [,4.0.7)[4.1.0, 4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59287
Affects org.springframework.graphql:spring-graphql | Versions [1.3.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Deserialization of Untrusted DataCVE-2026-59275
Affects org.springframework.amqp:spring-amqp | Versions [,4.0.5)[4.1.0,4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59289
Affects org.springframework.graphql:spring-graphql | Versions [1.2.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-47849
Affects org.springframework.data:spring-data-rest-core | Versions [,5.0.7)[5.1.0,5.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-47879
Affects org.springframework.cloud:spring-cloud-gateway-server | Versions [,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • C
Deserialization of Untrusted DataCVE-2026-59285
Affects org.springframework.graphql:spring-graphql | Versions [2.0.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Cross-site Scripting (XSS)CVE-2026-47877
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [7.0.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Cross-site Scripting (XSS)CVE-2026-59316
Affects org.springframework.security:spring-security-oauth2-authorization-server | Versions [1.4.0,)
Has fix
MavenPublished 26 Aug 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-59288
Affects org.springframework.graphql:spring-graphql | Versions [1.0.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-47836
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,5.0.5)
Has fix
MavenPublished 26 Aug 2026
  • H
Uncontrolled RecursionCVE-2026-47851
Affects org.springframework.ai:spring-ai-pdf-document-reader | Versions [1.0.0,2.0.1)
Has fix
MavenPublished 26 Aug 2026
  • C
Unsafe Dependency ResolutionCVE-2026-59286
Affects org.springframework.graphql:spring-graphql | Versions [1.0.0, 2.0.5)
Has fix
MavenPublished 26 Aug 2026
  • M
Directory TraversalCVE-2026-47894
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,5.0.5)
Has fix
MavenPublished 26 Aug 2026
  • M
Missing Authentication for Critical FunctionCVE-2026-47837
Affects org.springframework.cloud:spring-cloud-config-server | Versions [,5.0.5)
Has fix
MavenPublished 26 Aug 2026
  • L
Information ExposureCVE-2026-47893
Affects org.springframework:spring-webflux | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Timing AttackCVE-2026-59276
Affects org.springframework.security:spring-security-core | Versions [5.7.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Missing Release of Resource after Effective LifetimeCVE-2026-47888
Affects org.springframework:spring-messaging | Versions [5.2.0,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Access Control BypassCVE-2026-59277
Affects org.springframework.security:spring-security-core | Versions [7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Directory TraversalCVE-2026-59280
Affects org.springframework:spring-context-support | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • L
Improper NeutralizationCVE-2026-59313
Affects org.springframework:spring-webmvc | Versions [5.3.0,7.0.9)
Has fix
MavenPublished 26 Aug 2026