Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform Expansion Pack/spring-webflux

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.CVE-2026-22741 · GHSA-WG35-8JPF-2XV3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring MVC and WebFlux has Server Sent Event stream corruptionCVE-2026-22735 · GHSA-6HCQ-HMM3-JJ3C org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Low Fix reported
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41843 · GHSA-72PG-X5F8-J25J org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework DoS with Multipart Temp Files in WebFluxCVE-2026-22740 · GHSA-5843-P793-GHMM org.springframework:spring-webfluxRed Hat Fuse 7/spring-webflux MavenRed Hat Medium Fix reported
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resourcesCVE-2026-22745 · GHSA-6P4F-WCWH-5VVM org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported
Spring Framework Improper Path Limitation with Script View TemplatesCVE-2026-22737 · GHSA-4773-3JFM-QMX3 org.springframework:spring-webfluxorg.springframework:spring-webmvc MavenRed Hat Medium Fix reported