Security
فارسی
All products

Red Hat Fuse 7/spring-webmvc

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework Improper Path Limitation in XsltViewCVE-2026-47884 · GHSA-PC63-QCMH-9CMG org.springframework:spring-webmvcRed Hat Fuse 7/spring-webmvc MavenRed Hat Critical Fix reported
Spring Framework Path Traversal vulnerabilityCVE-2024-38819 · GHSA-G5VR-RGQM-VF78 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.CVE-2026-22741 · GHSA-WG35-8JPF-2XV3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring MVC and WebFlux has Server Sent Event stream corruptionCVE-2026-22735 · GHSA-6HCQ-HMM3-JJ3C org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843 · GHSA-72PG-X5F8-J25J org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Improper Path Limitation with Script View TemplatesCVE-2026-22737 · GHSA-4773-3JFM-QMX3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework MVC Applications Path Traversal VulnerabilityCVE-2025-41242 · GHSA-R936-GWX5-V52F org.springframework:spring-webmvcRed Hat AMQ Broker 7/spring-webmvc MavenRed Hat Medium Fix reported
Path traversal vulnerability in functional web frameworksCVE-2024-38816 · GHSA-CX7F-G6MP-7HQM org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat High Fix reported
Spring MVC controller vulnerable to a DoS attackCVE-2024-38828 · GHSA-W3C8-7R8F-9JP8 org.springframework:spring-webmvcRed Hat AMQ Broker 7/spring-webmvc MavenRed Hat Medium Fix reported
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Open redirect vulnerability in UrlHandlerFilter via broadly matching patternsCVE-2026-47883 Red Hat Fuse 7/spring-webfluxRed Hat Fuse 7/spring-webmvc Red Hat Medium No fix reported
org.springframework/spring-webmvc: Spring Framework: Open redirect vulnerability in UrlFileNameViewControllerCVE-2026-47887 Red Hat Enterprise Linux 8/pki-core:10.6/resteasyRed Hat Enterprise Linux 8/pki-deps:10.6/resteasy Red Hat Medium No fix reported
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Cross-site Scripting in MVC and WebFlux applicationsCVE-2026-59281 Red Hat Enterprise Linux 8/pki-core:10.6/resteasyRed Hat Enterprise Linux 8/pki-deps:10.6/resteasy Red Hat Medium No fix reported
org.springframework/spring-webmvc: Spring MVC: Stream corruption via Server-Sent Events (SSE)CVE-2026-59313 Red Hat Fuse 7/spring-webmvcRed Hat Single Sign-On 7/spring-webmvc Red Hat Medium No fix reported