What’s Vulnerable › Products
Spring Security vulnerabilities
49 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.
Check whether your Spring Security version is affected
Latest Spring Security vulnerabilities
- CVE-2026-59277 — Spring Security InetAddressMatchers Incomplete Internal Network Classification (CVSS 5.3)
- CVE-2026-59276 — Timing Attack via Non-Constant-Time Comparison of Sensitive Values (CVSS 5.9)
- CVE-2026-59354 — Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata (CVSS 8.8)
- CVE-2026-59270 — Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces (CVSS 9.1)
- CVE-2026-47877 — Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS) (CVSS 6.1)
- CVE-2026-47842 — Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation (CVSS 6.5)
- CVE-2026-47841 — WebAuthn User Verification Bypass via Session Serialization (CVSS 7.4)
- CVE-2026-41707 — Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay (CVSS 7.4)
- CVE-2026-47838 — Unauthorized User Impersonation when Using X.509 Client Certificates (CVSS 8.1)
- CVE-2026-41706 — Open Redirect When Using CookieRequestCache (CVSS 6.1)
- CVE-2026-41694 — SAML Payloads Decrypted Without Valid Signature (CVSS 5.3)
- CVE-2026-41008 — Spring Security Authorization Server Open Redirect via request_uri (CVSS 6.1)
- CVE-2026-41003 — Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting (CVSS 5.4)
- CVE-2026-40993 — Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry (CVSS 7.2)
- CVE-2026-40988 — Unbounded DEFLATE Inflation in SAML 2.0 Service Provider (CVSS 7.5)
- CVE-2026-22754 — ervlet Path Not Correctly Included in Path Matching of XML Authorization Rules (CVSS 7.5)
- CVE-2026-22753 — Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchers (CVSS 7.5)
- CVE-2026-22748 — Potential Security Misconfiguration when Using withIssuerLocation (CVSS 6.5)
- CVE-2026-22747 — Unauthorized User Impersonation when Using X.509 Client Certificates (CVSS 8.1)
- CVE-2026-22746 — User Attribute Enumeration when Using DaoAuthenticationProvider (CVSS 3.7)
- CVE-2026-22751 — Spring Security JdbcOneTimeTokenService allows a one-time token to authenticate multiple sessions (CVSS 4.8)
- CVE-2026-22732 — Under Some Conditions Spring Security HTTP Headers Are not Written (CVSS 9.1)
- CVE-2025-22234 — Spring Security - BCrypt Password Encoder maximum password length breaks timing attack mitigation (CVSS 5.3)
- CVE-2025-41248 — CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types (CVSS 7.5)
- CVE-2025-41232 — CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methods (CVSS 9.1)