Security
فارسی
All products

org.springframework:spring-webmvc

Maven · Package
27 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework Server Sent Event stream corruption while rendering fragmentsCVE-2026-47890 · GHSA-J9F9-W8PJ-32F8 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Critical Fix reported
Spring Framework Improper Path Limitation in XsltViewCVE-2026-47884 · GHSA-PC63-QCMH-9CMG org.springframework:spring-webmvcRed Hat Fuse 7/spring-webmvc MavenRed Hat Critical Fix reported
Spring Framework Path Traversal vulnerabilityCVE-2024-38819 · GHSA-G5VR-RGQM-VF78 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxCVE-2026-41841 · GHSA-MQ64-J8F9-9GCJ org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Multipart Request Smuggling in Spring MVC and WebFluxCVE-2026-41853 · GHSA-CJPG-RGQ5-FR37 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.CVE-2026-22741 · GHSA-WG35-8JPF-2XV3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring MVC and WebFlux has Server Sent Event stream corruptionCVE-2026-22735 · GHSA-6HCQ-HMM3-JJ3C org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring Framework Cross-site Scripting via JavaScriptUtilsCVE-2026-41845 · GHSA-3CHG-M5W7-QFV5 org.springframework:spring-webmvc Maven High Fix reported
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFluxCVE-2026-41842 · GHSA-X23C-287F-QQV5 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Spring Framework Cross-site Scripting via JSP Form TagsCVE-2026-41846 · GHSA-957G-F97V-VPPC org.springframework:spring-webmvcOpenShift Developer Tools and Services/spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Open Redirect in Spring MVC and WebFluxCVE-2026-41844 · GHSA-H3QP-GQRC-Q736 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843 · GHSA-72PG-X5F8-J25J org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resourcesCVE-2026-22745 · GHSA-6P4F-WCWH-5VVM org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Improper Path Limitation with Script View TemplatesCVE-2026-22737 · GHSA-4773-3JFM-QMX3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework MVC Applications Path Traversal VulnerabilityCVE-2025-41242 · GHSA-R936-GWX5-V52F org.springframework:spring-webmvcRed Hat AMQ Broker 7/spring-webmvc MavenRed Hat Medium Fix reported
Path traversal vulnerability in functional web frameworksCVE-2024-38816 · GHSA-CX7F-G6MP-7HQM org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398 · GHSA-8WX2-9Q48-VM9R org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Remote Code Execution in Spring FrameworkCVE-2022-22965 · GHSA-36P3-WJMG-H94X org.springframework.boot:spring-boot-starter-weborg.springframework.boot:spring-boot-starter-webflux MavenRed Hat Critical Fix reported
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatchCVE-2023-20860 · GHSA-7PHW-CXX7-Q9VQ org.springframework:spring-webmvcorg.springframework:spring MavenRed Hat Critical Fix reported
Spring MVC controller vulnerable to a DoS attackCVE-2024-38828 · GHSA-W3C8-7R8F-9JP8 org.springframework:spring-webmvcRed Hat AMQ Broker 7/spring-webmvc MavenRed Hat Medium Fix reported