Skip to content
OpenAdvisories

Product · Spring

Spring Security

29 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-59270

    Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces

    Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available network interfaces. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 …

    Spring Spring Security
  • Critical 9.1
    CVE-2025-41232

    CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methods

    Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass. Your application may be affected by this if the following are true: * You are using @EnableMethodSecurity(mode=ASPECTJ) an…

    Spring Spring Security org.springframework.security:spring-security-core org.springframework.security:spring-security-aspects Maven