Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Insertion of Sensitive Information into Log FileCVE-2026-59271
Affects org.springframework.amqp:spring-rabbit-junit | Versions [,4.0.5)[4.1.0,4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • C
Comparison of Object References Instead of Object ContentsCVE-2026-47841
Affects org.springframework.security:spring-security-webauthn | Versions [6.4.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Incorrect Default PermissionsCVE-2026-59292
Affects org.springframework.integration:spring-integration-core | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-47859
Affects org.springframework.integration:spring-integration-syslog | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-59322
Affects org.springframework.integration:spring-integration-core | Versions [,7.0.6)[7.1.0, 7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47874
Affects io.projectreactor.netty:reactor-netty-http | Versions [,1.3.7)
Has fix
MavenPublished 26 Aug 2026
  • M
User ImpersonationCVE-2026-47845
Affects io.projectreactor.netty:reactor-netty-http | Versions [,1.3.7)
Has fix
MavenPublished 26 Aug 2026
  • L
Open RedirectCVE-2026-47848
Affects io.projectreactor.netty:reactor-netty-http | Versions [,1.3.7)
Has fix
MavenPublished 26 Aug 2026
  • H
Generation of Predictable IV with CBC ModeCVE-2026-47842
Affects org.springframework.security:spring-security-crypto | Versions [5.7.0, 7.0.7)[7.1.0, 7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Race ConditionCVE-2026-47863
Affects io.projectreactor:reactor-core | Versions [,3.8.7)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47857
Affects io.projectreactor:reactor-core | Versions [,3.8.7)
Has fix
MavenPublished 26 Aug 2026
  • M
Open RedirectCVE-2026-47887
Affects org.springframework:spring-webmvc | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • C
Arbitrary Code InjectionCVE-2026-47884
Affects org.springframework:spring-webmvc | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47890
Affects org.springframework:spring-webflux | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47890
Affects org.springframework:spring-webmvc | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Sensitive Cookie in HTTPS Session Without "Secure" AttributeCVE-2026-47889
Affects org.springframework:spring-web | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Cross-site Scripting (XSS)CVE-2026-59281
Affects org.springframework:spring-web | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47885
Affects org.springframework:spring-web | Versions [6.1.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
HTTP Response SplittingCVE-2026-59314
Affects org.springframework:spring-web | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59283
Affects org.springframework:spring-expression | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47886
Affects org.springframework:spring-expression | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59282
Affects org.springframework:spring-beans | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Directory TraversalCVE-2026-47862
Affects org.springframework.integration:spring-integration-zip | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • L
Race ConditionCVE-2026-59321
Affects org.springframework.integration:spring-integration-scripting | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Cleartext Transmission of Sensitive InformationCVE-2026-59293
Affects org.springframework.integration:spring-integration-smb | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Symlink AttackCVE-2026-59311
Affects org.springframework.integration:spring-integration-zip | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Handling of Highly Compressed Data (Data Amplification)CVE-2026-59274
Affects org.springframework.integration:spring-integration-zip | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • C
Improper AuthenticationCVE-2026-53561
Affects org.apache.hive:hive-service | Versions [,4.2.1)
Has fix
MavenPublished 25 Aug 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-54050
Affects org.sakaiproject.profile2:profile2-api | Versions [23.0,]
Has fix
MavenPublished 25 Aug 2026
  • H
Authorization Bypass Through User-Controlled KeyCVE-2026-54050
Affects org.sakaiproject.profile2:profile2-impl | Versions [23.0,]
Has fix
MavenPublished 25 Aug 2026