Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Open RedirectCVE-2026-47883
Affects org.springframework:spring-webflux | Versions [6.2.0,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Open RedirectCVE-2026-47883
Affects org.springframework:spring-webmvc | Versions [6.2.0,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Use of Incorrectly-Resolved Name or ReferenceCVE-2026-47843
Affects io.projectreactor.netty:reactor-netty-core | Versions [,1.3.7)
Has fix
MavenPublished 26 Aug 2026
  • C
Binding to an Unrestricted IP AddressCVE-2026-59270
Affects org.springframework.security:spring-security-ldap | Versions [5.7.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Missing Release of Resource after Effective LifetimeCVE-2026-59320
Affects org.springframework.amqp:spring-amqp-client | Versions [4.1.0,4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Insecure Temporary FileCVE-2026-47852
Affects org.springframework.ai:spring-ai-transformers | Versions [1.0.0,2.0.1)
Has fix
MavenPublished 26 Aug 2026
  • L
Deserialization of Untrusted DataCVE-2026-59306
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0, 5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • M
Information ExposureCVE-2026-47844
Affects io.projectreactor.netty:reactor-netty-http-brave | Versions [,1.3.7)
Has fix
MavenPublished 26 Aug 2026
  • L
Insertion of Sensitive Information into Log FileCVE-2026-59301
Affects org.springframework.cloud:spring-cloud-function-adapter-azure | Versions [4.2.0,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • L
Insertion of Sensitive Information into Log FileCVE-2026-59300
Affects org.springframework.cloud:spring-cloud-function-adapter-aws | Versions [,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • L
Incorrect AuthorizationCVE-2026-59305
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-59315
Affects org.springframework.cloud:spring-cloud-config-monitor | Versions [,5.0.5)
Has fix
MavenPublished 26 Aug 2026
  • L
Insertion of Sensitive Information into Log FileCVE-2026-59302
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0, 5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Improper Certificate ValidationCVE-2026-59297
Affects org.springframework.cloud:spring-cloud-function-serverless-web | Versions [4.2.0,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • L
Allocation of Resources Without Limits or ThrottlingCVE-2026-59303
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0, 5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-server | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-core | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-client | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • M
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-59319
Affects org.springframework.ai:spring-ai-model-chat-memory-repository-redis | Versions [2.0.0,2.0.1)
Has fix
MavenPublished 26 Aug 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-59299
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-47880
Affects org.springframework.integration:spring-integration-jms | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-47861
Affects org.springframework.integration:spring-integration-ip | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-59291
Affects org.springframework.cloud:spring-cloud-function-context | Versions [4.2.0, 5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • M
Deserialization of Untrusted DataCVE-2026-47864
Affects org.springframework.integration:spring-integration-http | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Certificate ValidationCVE-2022-22946
Affects org.springframework.cloud:spring-cloud-gateway | Versions [3.1.0,3.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Exposure of Data Element to Wrong SessionCVE-2026-59324
Affects org.springframework.integration:spring-integration-core | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • L
HTTP Response SplittingCVE-2026-59298
Affects org.springframework.cloud:spring-cloud-function-web | Versions [,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • M
Directory TraversalCVE-2026-59294
Affects org.springframework.ai:spring-ai-transformers | Versions [,2.0.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Deserialization of Untrusted DataCVE-2026-59307
Affects org.springframework.integration:spring-integration-jdbc | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Deserialization of Untrusted DataCVE-2026-47856
Affects org.springframework.integration:spring-integration-core | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026