Skip to content
OpenAdvisories

Package · Maven

org.springframework:spring-jms

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-41855

    Spring Framework Unsafe Deserialization via Jackson JMS Converters

    In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to unauthorized actions vi…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven