spring
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 79 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 24, 2013 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata
Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration
Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores
Spring GraphQL Annotation Detection Vulnerability
WSS4J validation does not use configured replay cache
Spring WS SSRF via unvalidated WS-Addressing reply destinations
Jaxp13 XPath XXE via StreamSource and SAXSource
SOAP security faults leak Spring Security account state
Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default
Monitor spring in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.