Skip to content
OpenAdvisories

Package · Maven

org.springframework.security:spring-security-config

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-22754

    ervlet Path Not Correctly Included in Path Matching of XML Authorization Rules

    Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/servlet-path" pattern="/endpoint/**"/> to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorizati…

    Spring Spring Security apache-nifi apache-nifi-registry Wolfi Maven
  • High 7.5
    CVE-2026-22753

    Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchers

    Vulnerability in Spring Spring Security. If an application is using securityMatchers(String) and a PathPatternRequestMatcher.Builder bean to prepend a servlet path, matching requests to that filter chain may fail and its related security components will not b…

    Spring Spring Security apache-nifi apache-nifi-registry Wolfi Maven
  • High 7.3
    CVE-2023-34035 Public exploit

    Spring Security's authorization rules can be misconfigured when using multiple servlets

    Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfiguration if the application uses requestMatchers(String) and multiple servlets, one of them being Spring MVC’s Dispatche…

    org.springframework.security:spring-security-config Maven