Skip to content
OpenAdvisories

Package · Maven

org.springframework:spring-expression

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-41852

    Spring Framework Arbitrary Method Invocation in SpEL Expressions

    A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic. Affected versions: Sp…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven