Security
فارسی
All products

org.springframework.security:spring-security-web

Maven · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client CertificatesCVE-2026-47838 · GHSA-293Q-567P-WMWQ org.springframework.security:spring-security-web Maven Medium Fix reported
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCacheCVE-2026-41706 · GHSA-X2R2-RVHQ-2MQV org.springframework.security:spring-security-web Maven Medium Fix reported
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client CertificatesCVE-2026-22747 · GHSA-2JRG-RF5X-568G org.springframework.security:spring-security-web Maven Medium Fix reported
Spring Security HTTP Headers Are not Written Under Some ConditionsCVE-2026-22732 · GHSA-MF92-479X-3373 org.springframework.security:spring-security-webOpenShift Developer Tools and Services/jenkins MavenRed Hat Critical Fix reported
Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux ApplicationsCVE-2024-38821 · GHSA-C4Q5-6C82-3QPW org.springframework.security:spring-security-web Maven Critical Fix reported
Authorization bypass in Spring SecurityCVE-2022-22978 · GHSA-HH32-7344-CG2F org.springframework.security:spring-security-coreorg.springframework.security:spring-security-web MavenRed Hat Critical Fix reported
Privilege escalation in spring securityCVE-2021-22112 · GHSA-GQ28-H5VG-8PRX org.springframework.security:spring-security-bomorg.springframework.security:spring-security-web Maven High Fix reported