Skip to content
OpenAdvisories

Product · VMware

Spring Framework

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-22741

    Static resource cache poisoning in Spring MVC and WebFlux

    Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the application is using Spring MVC or Spring WebFlux * the application …

    VMware Spring Framework libspring-java libspring-java Debian Ubuntu Maven