Security
فارسی
All products

org.springframework:spring-webflux

Maven · Package
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework Header Predicate Bypass in WebFlux Functional EndpointsCVE-2026-47892 · GHSA-9QF2-26P9-2Q2Q org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Critical Fix reported
Spring Framework Server Sent Event stream corruption while rendering fragmentsCVE-2026-47890 · GHSA-J9F9-W8PJ-32F8 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Critical Fix reported
Spring Framework Path Traversal vulnerabilityCVE-2024-38819 · GHSA-G5VR-RGQM-VF78 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxCVE-2026-41841 · GHSA-MQ64-J8F9-9GCJ org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Multipart Request Smuggling in Spring MVC and WebFluxCVE-2026-41853 · GHSA-CJPG-RGQ5-FR37 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Denial of Service via Multipart Requests in WebFluxCVE-2026-41840 · GHSA-83F7-V6PX-PP3H org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Medium Fix reported
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.CVE-2026-22741 · GHSA-WG35-8JPF-2XV3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring MVC and WebFlux has Server Sent Event stream corruptionCVE-2026-22735 · GHSA-6HCQ-HMM3-JJ3C org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFluxCVE-2026-41842 · GHSA-X23C-287F-QQV5 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Spring Framework Open Redirect in Spring MVC and WebFluxCVE-2026-41844 · GHSA-H3QP-GQRC-Q736 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843 · GHSA-72PG-X5F8-J25J org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Escalation via Session Fixation in WebFluxCVE-2026-41839 · GHSA-4HFH-6X8G-GWPP org.springframework:spring-webfluxOpenShift Developer Tools and Services/spring-web MavenRed Hat Medium Fix reported
Spring Framework DoS with Multipart Temp Files in WebFluxCVE-2026-22740 · GHSA-5843-P793-GHMM org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Medium Fix reported
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resourcesCVE-2026-22745 · GHSA-6P4F-WCWH-5VVM org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Improper Path Limitation with Script View TemplatesCVE-2026-22737 · GHSA-4773-3JFM-QMX3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Path traversal vulnerability in functional web frameworksCVE-2024-38816 · GHSA-CX7F-G6MP-7HQM org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398 · GHSA-8WX2-9Q48-VM9R org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSLCVE-2026-41847 · GHSA-VQGP-PF68-6947 org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Medium No fix reported
Remote Code Execution in Spring FrameworkCVE-2022-22965 · GHSA-36P3-WJMG-H94X org.springframework.boot:spring-boot-starter-weborg.springframework.boot:spring-boot-starter-webflux MavenRed Hat Critical Fix reported
CSRF attack via CORS preflight requests with Spring MVC or Spring WebFluxCVE-2020-5397 · GHSA-7PM4-G2QJ-J85X org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported