Skip to content
OpenAdvisories

Product · Spring Security

Spring Authorization Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-22752

    Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

    Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.

    Spring Security Spring Authorization Server