Security
فارسی
All products

Red Hat Fuse 7/spring-webflux

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework Header Predicate Bypass in WebFlux Functional EndpointsCVE-2026-47892 · GHSA-9QF2-26P9-2Q2Q org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Critical Fix reported
Spring Framework Denial of Service via Multipart Requests in WebFluxCVE-2026-41840 · GHSA-83F7-V6PX-PP3H org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Medium Fix reported
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.CVE-2026-22741 · GHSA-WG35-8JPF-2XV3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring MVC and WebFlux has Server Sent Event stream corruptionCVE-2026-22735 · GHSA-6HCQ-HMM3-JJ3C org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843 · GHSA-72PG-X5F8-J25J org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework DoS with Multipart Temp Files in WebFluxCVE-2026-22740 · GHSA-5843-P793-GHMM org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Medium Fix reported
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resourcesCVE-2026-22745 · GHSA-6P4F-WCWH-5VVM org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Improper Path Limitation with Script View TemplatesCVE-2026-22737 · GHSA-4773-3JFM-QMX3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSLCVE-2026-41847 · GHSA-VQGP-PF68-6947 org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Medium No fix reported
org.springframework/spring-webflux: org.eclipse.jetty/jetty-core: Spring Framework: Missing SameSite attribute in WebFlux cookies on Jetty 12CVE-2026-47889 Red Hat AMQ Broker 7/jetty-coreRed Hat Fuse 7/spring-webflux Red Hat Medium No fix reported
org.springframework/spring-webflux: Spring WebFlux: Information Disclosure via Request Headers in Exception ReasonsCVE-2026-47893 Red Hat Fuse 7/spring-webflux Red Hat Medium No fix reported
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Open redirect vulnerability in UrlHandlerFilter via broadly matching patternsCVE-2026-47883 Red Hat Fuse 7/spring-webfluxRed Hat Fuse 7/spring-webmvc Red Hat Medium No fix reported
org.springframework/spring-webflux: Spring WebFlux: Denial of Service via ignored maxPartSize limitCVE-2026-47885 Red Hat Fuse 7/spring-webflux Red Hat High No fix reported
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Cross-site Scripting in MVC and WebFlux applicationsCVE-2026-59281 Red Hat Enterprise Linux 8/pki-core:10.6/resteasyRed Hat Enterprise Linux 8/pki-deps:10.6/resteasy Red Hat Medium No fix reported