Package · Maven

org.springframework.ws:spring-ws-security

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.2

CVE-2026-40994

Wss4jSecurityInterceptor disables WS-I BSP validation by default

Wss4jSecurityInterceptor initialized its BSP (WS-I Basic Security Profile) compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestData. Services that validate WS-Security on the network could therefore accept messages that violate…

Spring Spring Web Services org.springframework.ws:spring-ws-security its Ubuntu Maven

Jun 11, 2026