All products

org.springframework:spring-websocket

Maven · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messagesCVE-2025-41254 · GHSA-7FCH-4F2F-JCGM org.springframework:spring-websocketLogging Subsystem for Red Hat OpenShift/spring-core MavenRed Hat Medium Fix reported
Spring Framework Predictable Session ID in WebSocket ModuleCVE-2026-41838 · GHSA-Q723-847Q-5G8G org.springframework:spring-websocket Maven Medium Fix reported