What’s Vulnerable › Products

Spring vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Spring version is affected

Latest Spring vulnerabilities

• CVE-2024-38828 — CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter (CVSS 5.3)
• CVE-2024-38820 — CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception (CVSS 5.3)
• CVE-2024-22258 — CVE-2024-22258: PKCE Downgrade in Spring Authorization Server (CVSS 6.1)