Where
-Infinity
0

Trending

Last week
Last month
Last year

VMware Spring FrameworkSpring Framework Unsafe Deserialization via Jackson JMS Converters

Risk 86
Severity
9.8
First published (updated )
CVE-2026-41855

VMware Spring FrameworkSpring Framework Server-Side Request Forgery via UriComponentsBuilder

Risk 40
Severity
6.5
First published (updated )
CVE-2026-41854

VMware Spring FrameworkSpring Framework Multipart Request Smuggling in Spring MVC and WebFlux

Risk 27
Severity
5.3
First published (updated )
CVE-2026-41853

VMware Spring FrameworkSpring Framework Arbitrary Method Invocation in SpEL Expressions

Risk 27
Severity
5.3
First published (updated )
CVE-2026-41852

VMware Spring FrameworkSpring Framework Denial of Service via Unbounded Cache in SpEL

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41851
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring FrameworkSpring Framework Algorithmic Denial of Service via SpEL Expressions

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41850

VMware Spring FrameworkSpring Framework Denial of Service via Integer Overflow in SpEL Expressions

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41849

VMware Spring FrameworkSpring Framework Denial of Service via AntPathMatcher

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41848

Spring Spring FrameworkSpring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

Risk 27
Severity
5.3
First published (updated )
CVE-2026-41847

VMware Spring FrameworkSpring Framework Cross-site Scripting via JSP Form Tags

Risk 38
Severity
6.1
First published (updated )
CVE-2026-41846
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring FrameworkSpring Framework Cross-site Scripting via JavaScriptUtils

Risk 47
Severity
7.1
First published (updated )
CVE-2026-41845

VMware Spring FrameworkSpring Framework Open Redirect in Spring MVC and WebFlux

Risk 38
Severity
6.1
First published (updated )
CVE-2026-41844

VMware Spring FrameworkSpring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux

Risk 35
Severity
5.9
First published (updated )
CVE-2026-41843

VMware Spring FrameworkSpring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41842

VMware Spring FrameworkSpring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux

Risk 35
Severity
5.9
First published (updated )
CVE-2026-41841
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring FrameworkSpring Framework Denial of Service via Multipart Requests in WebFlux

Risk 35
Severity
5.9
First published (updated )
CVE-2026-41840

VMware Spring FrameworkSpring Framework Escalation via Session Fixation in WebFlux

Risk 28
Severity
4.2
First published (updated )
CVE-2026-41839

VMware Spring FrameworkSpring Framework Predictable Session ID in WebSocket Module

Risk 43
Severity
7.5
First published (updated )
CVE-2026-41838

VMware Spring FrameworkDenial of service in static resource handling on Windows platforms

Risk 27
Severity
5.3
First published (updated )
CVE-2026-22745

VMware Spring FrameworkStatic resource cache poisoning in Spring MVC and WebFlux

Risk 17
Severity
3.1
First published (updated )
CVE-2026-22741
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

VMware Spring FrameworkSpring Framework DoS with Multipart Temp Files in WebFlux

Risk 38
Severity
6.5
First published (updated )
CVE-2026-22740

maven/org.springframework:spring-webfluxSpring Framework Improper Path Limitation with Script View Templates

Risk 35
Severity
5.9
First published (updated )
CVE-2026-22737

maven/org.springframework:spring-webfluxServer Sent Event stream corruption

Risk 15
Severity
2.6
First published (updated )
CVE-2026-22735

VMware Spring FrameworkSpring Framework DataBinder Case Sensitive Match Exception

Risk 28
Severity
5.3
First published (updated )
CVE-2024-38820

maven/org.springframework:spring-webSpring Framework URL Parsing with Host Validation (2nd report)

Risk 62
Severity
8.1
First published (updated )
CVE-2024-22259
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.springframework:spring-coreSpring Framework server Web DoS Vulnerability

Risk 31
Severity
7.5
EPSS
0.05%
First published (updated )
CVE-2024-22233

maven/org.springframework:spring-webmvcSpring Framework server Web Observations DoS Vulnerability

Risk 45
Severity
7.5
First published (updated )
CVE-2023-34053

maven/cn.dev33:sa-token-coreAn issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privilege…

Risk 89
Severity
9.8
First published (updated )
CVE-2023-44794

redhat/spring frameworkIn spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a use…

Risk 46
Severity
7.5
First published (updated )
CVE-2023-20863

VMware Spring FrameworkAn issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary cod…

Risk 86
Severity
9.8
First published (updated )
CVE-2020-29312
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203