What’s Vulnerable › Products

Spring Authorization Server vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Spring Authorization Server version is affected

Latest Spring Authorization Server vulnerabilities

• CVE-2026-59316 — Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS) (CVSS 8.2)
• CVE-2026-59355 — Spring Authorization Server: Open Redirect via request_uri parameter (CVSS 6.1)
• CVE-2026-22752 — Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata (CVSS 9.6)
• CVE-2026-41008 — Spring Security Authorization Server Open Redirect via request_uri (CVSS 6.1)