Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat build of Apache Camel - HawtIO 4/spring-webmvc
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Spring Framework Server Sent Event stream corruption while rendering fragments
CVE-2026-47890 · GHSA-J9F9-W8PJ-32F8
org.springframework:spring-webflux
org.springframework:spring-webmvc
Maven
Red Hat
Critical
Fix reported
2026-10-07
Spring Framework Improper Path Limitation in XsltView
CVE-2026-47884 · GHSA-PC63-QCMH-9CMG
org.springframework:spring-webmvc
Red Hat Fuse 7/spring-webmvc
Maven
Red Hat
Critical
Fix reported
2026-10-06
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.
CVE-2026-22741 · GHSA-WG35-8JPF-2XV3
org.springframework:spring-webflux
org.springframework:spring-webmvc
Maven
Red Hat
Low
Fix reported
2026-09-10
Spring MVC and WebFlux has Server Sent Event stream corruption
CVE-2026-22735 · GHSA-6HCQ-HMM3-JJ3C
org.springframework:spring-webflux
org.springframework:spring-webmvc
Maven
Red Hat
Low
Fix reported
2026-09-10
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
CVE-2026-41843 · GHSA-72PG-X5F8-J25J
org.springframework:spring-webflux
org.springframework:spring-webmvc
Maven
Red Hat
Medium
Fix reported
2026-09-10
Spring Framework Improper Path Limitation with Script View Templates
CVE-2026-22737 · GHSA-4773-3JFM-QMX3
org.springframework:spring-webflux
org.springframework:spring-webmvc
Maven
Red Hat
Medium
Fix reported
2026-09-10
Spring Framework MVC Applications Path Traversal Vulnerability
CVE-2025-41242 · GHSA-R936-GWX5-V52F
org.springframework:spring-webmvc
Red Hat AMQ Broker 7/spring-webmvc
Maven
Red Hat
Medium
Fix reported
2026-09-10
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Open redirect vulnerability in UrlHandlerFilter via broadly matching patterns
CVE-2026-47883
Red Hat Fuse 7/spring-webflux
Red Hat Fuse 7/spring-webmvc
Red Hat
Medium
No fix reported
Not recorded
org.springframework/spring-webmvc: Spring Framework: Open redirect vulnerability in UrlFileNameViewController
CVE-2026-47887
Red Hat Enterprise Linux 8/pki-core:10.6/resteasy
Red Hat Enterprise Linux 8/pki-deps:10.6/resteasy
Red Hat
Medium
No fix reported
Not recorded
Spring Framework: Spring Framework: Memory leak via malformed RSocket SETUP frame
CVE-2026-47888
OpenShift Developer Tools and Services/jenkins
Red Hat Enterprise Linux 9/owasp-java-encoder
Red Hat
High
No fix reported
Not recorded
org.springframework/spring-webmvc: Spring Framework: Path Traversal via untrusted input in FreeMarker integration
CVE-2026-59280
Red Hat Single Sign-On 7/spring-webmvc
Red Hat build of Apache Camel - HawtIO 4/spring-webmvc
Red Hat
Medium
No fix reported
Not recorded
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Cross-site Scripting in MVC and WebFlux applications
CVE-2026-59281
Red Hat Enterprise Linux 8/pki-core:10.6/resteasy
Red Hat Enterprise Linux 8/pki-deps:10.6/resteasy
Red Hat
Medium
No fix reported
Not recorded
org.springframework/spring-webmvc: Spring MVC: Stream corruption via Server-Sent Events (SSE)
CVE-2026-59313
Red Hat Fuse 7/spring-webmvc
Red Hat Single Sign-On 7/spring-webmvc
Red Hat
Medium
No fix reported
Not recorded
