product of vmware

spring framework

7 thingsrelated by NVD

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring…
CVE-2026-47889
Severity high
Spring Framework: Spring Framework: Memory leak via malformed RSocket SETUP frame
CVE-2026-47888
Severity high
org.springframework/spring-webmvc: Spring Framework: Open redirect vulnerability in UrlFileNameViewController
CVE-2026-47887
Severity medium
Spring Framework: org.springframework/spring-expression: Spring Framework: Denial of Service via unbounded exponentiation in SpEL…
CVE-2026-47886
Severity high
org.springframework/spring-webflux: Spring WebFlux: Denial of Service via ignored maxPartSize limit
CVE-2026-47885
Severity high
org.springframework/spring-webmvc: Spring Framework: Remote Code Execution via improper path limitation in XsltView
CVE-2026-47884
Severity critical
org.springframework/spring-webmvc: org.springframework/spring-webflux: Spring Framework: Open redirect vulnerability in UrlHandlerFilter…
CVE-2026-47883
Severity medium