Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • L
Allocation of Resources Without Limits or ThrottlingCVE-2026-59303
Affects org.springframework.cloud:spring-cloud-stream | Versions [4.2.0, 5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-server | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-core | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • L
Assignment to Variable without UseCVE-2026-59304
Affects org.springframework.cloud:spring-cloud-stream-schema-registry-client | Versions [4.2.0,5.0.3)
Has fix
MavenPublished 26 Aug 2026
  • M
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-59319
Affects org.springframework.ai:spring-ai-model-chat-memory-repository-redis | Versions [2.0.0,2.0.1)
Has fix
MavenPublished 26 Aug 2026
  • L
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-59299
Affects org.springframework.cloud:spring-cloud-function-context | Versions [,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-47880
Affects org.springframework.integration:spring-integration-jms | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Server-side Request Forgery (SSRF)CVE-2026-47861
Affects org.springframework.integration:spring-integration-ip | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Server-side Request Forgery (SSRF)CVE-2026-59291
Affects org.springframework.cloud:spring-cloud-function-context | Versions [4.2.0, 5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • M
Deserialization of Untrusted DataCVE-2026-47864
Affects org.springframework.integration:spring-integration-http | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Certificate ValidationCVE-2022-22946
Affects org.springframework.cloud:spring-cloud-gateway | Versions [3.1.0,3.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Exposure of Data Element to Wrong SessionCVE-2026-59324
Affects org.springframework.integration:spring-integration-core | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • L
HTTP Response SplittingCVE-2026-59298
Affects org.springframework.cloud:spring-cloud-function-web | Versions [,5.0.4)
Has fix
MavenPublished 26 Aug 2026
  • M
Directory TraversalCVE-2026-59294
Affects org.springframework.ai:spring-ai-transformers | Versions [,2.0.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Deserialization of Untrusted DataCVE-2026-59307
Affects org.springframework.integration:spring-integration-jdbc | Versions [6.4.0,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Deserialization of Untrusted DataCVE-2026-47856
Affects org.springframework.integration:spring-integration-core | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Insertion of Sensitive Information into Log FileCVE-2026-59271
Affects org.springframework.amqp:spring-rabbit-junit | Versions [,4.0.5)[4.1.0,4.1.1)
Has fix
MavenPublished 26 Aug 2026
  • C
Comparison of Object References Instead of Object ContentsCVE-2026-47841
Affects org.springframework.security:spring-security-webauthn | Versions [6.4.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Incorrect Default PermissionsCVE-2026-59292
Affects org.springframework.integration:spring-integration-core | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-47859
Affects org.springframework.integration:spring-integration-syslog | Versions [,7.0.6)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-59322
Affects org.springframework.integration:spring-integration-core | Versions [,7.0.6)[7.1.0, 7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47874
Affects io.projectreactor.netty:reactor-netty-http | Versions [,1.3.7)
Has fix
MavenPublished 26 Aug 2026
  • M
User ImpersonationCVE-2026-47845
Affects io.projectreactor.netty:reactor-netty-http | Versions [,1.3.7)
Has fix
MavenPublished 26 Aug 2026
  • L
Open RedirectCVE-2026-47848
Affects io.projectreactor.netty:reactor-netty-http | Versions [,1.3.7)
Has fix
MavenPublished 26 Aug 2026
  • H
Generation of Predictable IV with CBC ModeCVE-2026-47842
Affects org.springframework.security:spring-security-crypto | Versions [5.7.0, 7.0.7)[7.1.0, 7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Race ConditionCVE-2026-47863
Affects io.projectreactor:reactor-core | Versions [,3.8.7)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-47857
Affects io.projectreactor:reactor-core | Versions [,3.8.7)
Has fix
MavenPublished 26 Aug 2026
  • M
Open RedirectCVE-2026-47887
Affects org.springframework:spring-webmvc | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • C
Arbitrary Code InjectionCVE-2026-47884
Affects org.springframework:spring-webmvc | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47890
Affects org.springframework:spring-webflux | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026