Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: VMware Spring Framework 5.3.48, 6.1.27 and 2 more versions Clear all filters
TI-2026-18265 CVE-2026-22741 · GHSA-wg35-8jpf-2xv3

Static resource cache poisoning in Spring MVC and WebFlux

Priority LOW 15

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00236 Published 2026-04-29 Partial fix · 7.0.7, 6.2.18 +2 CWE-524
TI-2026-18264 CVE-2026-22740 · GHSA-5843-p793-ghmm

Spring Framework DoS with Multipart Temp Files in WebFlux

Priority LOW 29

A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2026-04-29 Partial fix · 7.0.7, 6.2.18 +2 CWE-400