Search for packages
| purl | pkg:maven/org.springframework/spring-webmvc@7.0.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-pc63-qcmh-9cmg
Aliases: CVE-2026-47884 |
Spring Framework Improper Path Limitation in XsltView Use of XsltView in a Spring MVC application can result in SSRF and … |
Not vulnerable |
|
CVE-2026-47884
Aliases: GHSA-pc63-qcmh-9cmg |
Spring Framework Improper Path Limitation in XsltView Use of XsltView in a Spring MVC application can result in SSRF and … |
Not vulnerable |
|
GHSA-j9f9-w8pj-32f8
Aliases: CVE-2026-47890 |
Spring Framework Server Sent Event stream corruption while rendering fragments Spring MVC and WebFlux applications are vulnerable to stream corruption … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-957g-f97v-vppc
|
Spring Framework Cross-site Scripting via JSP Form Tags Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or … |
CVE-2026-41846
|
|
GHSA-h3qp-gqrc-q736
|
Spring Framework Open Redirect in Spring MVC and WebFlux A Spring MVC or Spring WebFlux application which configures a mapping … |
CVE-2026-41844
|
|
GHSA-mq64-j8f9-9gcj
|
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
CVE-2026-41841
|
|
GHSA-72pg-x5f8-j25j
|
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
CVE-2026-41843
|
|
GHSA-x23c-287f-qqv5
|
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
CVE-2026-41842
|
|
GHSA-cjpg-rgq5-fr37
|
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable to Multipart request … |
CVE-2026-41853
|
|
GHSA-3chg-m5w7-qfv5
|
Spring Framework Cross-site Scripting via JavaScriptUtils Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape() may lead to JavaScript code injection … |
CVE-2026-41845
|