Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Information ExposureCVE-2024-38829
Affects org.springframework.ldap:spring-ldap-odm | Versions [,2.4.4)[3.2.0,3.2.8)
Has fix
MavenPublished 20 Nov 2024
  • C
Deserialization of Untrusted DataCVE-2026-41732
Affects org.springframework.pulsar:spring-pulsar | Versions [, 1.2.18)[2.0.0-M1, 2.0.6)
Has fix
MavenPublished 11 Jun 2026
  • M
XML External Entity (XXE) InjectionCVE-2026-40991
Affects org.springframework.restdocs:spring-restdocs-restassured | Versions [,3.0.6)[4.0.0-M1,]
Has fix
MavenPublished 27 Jul 2026
  • M
XML External Entity (XXE) InjectionCVE-2026-40991
Affects org.springframework.restdocs:spring-restdocs-webtestclient | Versions [,3.0.6)[4.0.0-M1,4.0.1)
Has fix
MavenPublished 27 Jul 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41710
Affects org.springframework.retry:spring-retry | Versions [, 2.0.13)
Has fix
MavenPublished 9 Jun 2026
  • H
Denial of Service (DoS)CVE-2022-22969
Affects org.springframework.security.oauth:spring-security-oauth2 | Versions [0,2.5.2.RELEASE)
Has fix
MavenPublished 21 Apr 2022
  • M
Open RedirectCVE-2019-11269
Affects org.springframework.security.oauth:spring-security-oauth2 | Versions [2.3.0.RELEASE,2.3.6.RELEASE)[2.2.0.RELEASE,2.2.5.RELEASE)[2.1.0.RELEASE,2.1.5.RELEASE)[2.0.0.RELEASE, 2.0.18.RELEASE)
Has fix
MavenPublished 30 May 2019
  • C
Credentials DisclosureCVE-2019-3778
Affects org.springframework.security.oauth:spring-security-oauth2 | Versions [2.3.0.RELEASE,2.3.5.RELEASE)[2.2.0.RELEASE,2.2.4.RELEASE)[2.1.0.RELEASE,2.1.4.RELEASE)[,2.0.17.RELEASE)
Has fix
MavenPublished 8 Mar 2019
  • H
Privilege EscalationCVE-2018-15758
Affects org.springframework.security.oauth:spring-security-oauth2 | Versions [, 2.0.16.RELEASE)[2.1.0.RELEASE, 2.1.3.RELEASE)[2.2.0.RELEASE, 2.2.3.RELEASE)[2.3.0.RELEASE, 2.3.4.RELEASE)
Has fix
MavenPublished 17 Oct 2018
  • C
Arbitrary Code ExecutionCVE-2018-1260
Affects org.springframework.security.oauth:spring-security-oauth2 | Versions [,2.0.15.RELEASE)[2.1.0.RELEASE, 2.1.2.RELEASE)[2.2.0.RELEASE, 2.2.2.RELEASE)[2.3.0.RELEASE, 2.3.3.RELEASE)
Has fix
MavenPublished 10 May 2018
  • H
Arbitrary Code ExecutionCVE-2016-4977
Affects org.springframework.security.oauth:spring-security-oauth2 | Versions [1.0.0.RELEASE,2.0.10.RELEASE)
Has fix
MavenPublished 4 Jul 2016
  • M
Authorization BypassCVE-2024-38827
Affects org.springframework.security:spring-security-cas | Versions [,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
Has fix
MavenPublished 20 Nov 2024
  • H
Authentication BypassCVE-2024-22234
Affects org.springframework.security:spring-security-cas | Versions [6.1.0,6.1.7)[6.2.0,6.2.2)
Has fix
MavenPublished 20 Feb 2024
  • C
Access Restriction BypassCVE-2014-3527
Affects org.springframework.security:spring-security-cas | Versions [3.2.0,3.2.5.RELEASE)[3.1.0,3.1.7.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • H
Access Control BypassCVE-2026-22753
Affects org.springframework.security:spring-security-config | Versions [7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • H
Access Control BypassCVE-2026-22754
Affects org.springframework.security:spring-security-config | Versions [7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • M
Authorization BypassCVE-2024-38827
Affects org.springframework.security:spring-security-config | Versions [,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
Has fix
MavenPublished 20 Nov 2024
  • M
Missing AuthorizationCVE-2024-38810
Affects org.springframework.security:spring-security-config | Versions [6.3.0,6.3.2)
Has fix
MavenPublished 20 Aug 2024
  • M
Incorrect Permission Assignment for Critical ResourceCVE-2023-34042
Affects org.springframework.security:spring-security-config | Versions [5.7.9,5.7.11)[5.8.4,5.8.7)[6.0.4,6.0.7)[6.1.1,6.1.4)
Has fix
MavenPublished 19 Sept 2023
  • C
Access Control BypassCVE-2023-34034
Affects org.springframework.security:spring-security-config | Versions [5.6.0,5.6.12)[5.7.0,5.7.10)[5.8.0,5.8.5)[6.0.0,6.0.5)[6.1.0,6.1.2)
Has fix
MavenPublished 18 Jul 2023
  • H
Improper AuthorizationCVE-2023-34035
Affects org.springframework.security:spring-security-config | Versions [5.8.0,5.8.5)[6.0.0,6.0.5)[6.1.0,6.1.2)
Has fix
MavenPublished 18 Jul 2023
  • M
Session FixationCVE-2023-20862
Affects org.springframework.security:spring-security-config | Versions [5.7.0,5.7.8)[5.8.0,5.8.3)[6.0.0,6.0.3)
Has fix
MavenPublished 20 Apr 2023
  • M
Access Restriction BypassCVE-2018-1199
Affects org.springframework.security:spring-security-config | Versions [4.1.0.RELEASE, 4.1.5.RELEASE)[4.2.0.RELEASE, 4.2.4.RELEASE)[5.0.0.RELEASE, 5.0.3.RELEASE)
Has fix
MavenPublished 17 Mar 2018
  • H
Authentication BypassCVE-2016-5007
Affects org.springframework.security:spring-security-config | Versions [3.2.0.RELEASE,4.1.1.RELEASE)
Has fix
MavenPublished 11 Jul 2016
  • H
Timing AttackCVE-2026-59276
Affects org.springframework.security:spring-security-core | Versions [5.7.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Access Control BypassCVE-2026-59277
Affects org.springframework.security:spring-security-core | Versions [7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Information ExposureCVE-2026-22746
Affects org.springframework.security:spring-security-core | Versions [,6.5.10)[7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • M
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-22751
Affects org.springframework.security:spring-security-core | Versions [6.4.0,6.5.10)[7.0.0-M1,7.0.5)
Has fix
MavenPublished 22 Apr 2026
  • H
Incorrect AuthorizationCVE-2025-41248
Affects org.springframework.security:spring-security-core | Versions [6.4.4,6.4.10)[6.5.0,6.5.4)
Has fix
MavenPublished 17 Sept 2025
  • C
Missing Authentication for Critical FunctionCVE-2025-41232
Affects org.springframework.security:spring-security-core | Versions [6.4.0,6.4.6)
Has fix
MavenPublished 20 May 2025