Skip to content
OpenAdvisories

Vendor

Spring

247 known vulnerabilities.

Products

Spring Framework 45 Spring Security 29 Spring AI 18 Spring Integration 16 Spring Boot 15 Spring Cloud Config 10 Spring for GraphQL 9 Spring AMQP 8 Spring Cloud Function 8 Spring Web Services 8 Reactor Netty 7 Spring for Apache Kafka 6 Spring Data REST 6 Spring Tools for Eclipse 6 Spring Cloud Stream 5 Spring Batch 4 Spring 4 Micrometer 4 Spring Data Commons 4 Spring HATEOAS 3 Spring Tools for VSCode / Cursor / Theia 2 Spring LDAP 2 Reactor Core 2 Spring Cloud Gateway 2 Spring Data JPA 2 Spring Data MongoDB 2 Spring Web Flow 2 Spring Authorization Server 2 Spring Security OAuth 2 Spring gRPC 2 Micrometer Tracing 1 Cloud Gateway 1 Spring Foundation 1 Spring Cloud Contract 1 Spring Cloud Commons 1 Spring Retry 1 Spring Cloud 1 Spring Statemachine 1 Spring REST Docs 1 Spring Cloud Data Flow 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-47883 Public exploit

    Spring Framework Open Redirect in UrlHandlerFilter

    UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

    Spring Spring Framework libspring-java Ubuntu
  • Medium 5.9
    CVE-2026-41710 Public exploit

    Cache Exhaustion in Stateful Retries leads to Denial of Service

    An attacker can craft a large number of unique requests that trigger a failure, exhausting the capacity of the application-wide stateful retry cache. Once the cache is full, it permanently rejects any further updates, causing all later stateful retries and ci…

    Spring Spring Retry org.springframework.retry:spring-retry Maven
  • Medium 6.8
    CVE-2026-22747 Public exploit

    Unauthorized User Impersonation when Using X.509 Client Certificates

    Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an…

    Spring Spring Security org.springframework.security:spring-security-web Maven
  • Medium 5.3
    CVE-2025-22223 Public exploit

    Spring Security Vulnerable to Authorization Bypass via Security Annotations

    Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass.  You are not affected if you are not using @EnableMethodSecurity, or you do not have method security …

    Spring Spring Security org.springframework.security:spring-security-core Maven
  • Medium 5.3
    CVE-2024-38828 Public exploit

    CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

    Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

    Spring Spring libspring-java libspring-java Debian Ubuntu Maven
  • Medium 5.0
    CVE-2023-34050 Public exploit

    Spring AMQP Deserialization Vulnerability

    In spring AMQP versions 1.0.0 to 2.4.16 and 3.0.0 to 3.0.9 , allowed list patterns for deserializable class names were added to Spring AMQP, allowing users to lock down deserialization of data in messages from untrusted sources; however by default, when no al…

    Spring Spring AMQP
  • Medium 5.3
    CVE-2023-34040 Public exploit

    Java Deserialization vulnerability in Spring-Kafka When Improperly Configured

    In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the dese…

    Spring Spring for Apache Kafka org.springframework.kafka:spring-kafka Maven
  • Medium 4.2
    CVE-2019-11269 Public exploit

    Open Redirector in spring-security-oauth2

    Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user o…

    Spring Spring Security OAuth org.springframework.security.oauth:spring-security-oauth Maven
  • Medium 6.5
    CVE-2019-3799 Public exploit EPSS 85%

    Directory Traversal with spring-cloud-config-server

    Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A mal…

    Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  • Medium 6.5
    CVE-2019-3778 Public exploit EPSS 17%

    Open Redirect in spring-security-oauth2

    Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user…

    Spring Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 org.springframework.security.oauth:spring-security-oauth Maven