Skip to content
OpenAdvisories

Product · VMware

Spring Security

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-41248

    CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types

    The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annota…

    VMware Spring Security org.springframework.security:spring-security-core Maven