Skip to content
OpenAdvisories

Vendor

Spring Security

1 known vulnerabilities.

Products

Spring Authorization Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-22752

    Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

    Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

    Spring Security Spring Authorization Server