Search for packages
| purl | pkg:maven/org.springframework.security/spring-security-core@6.4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-9pp5-9c7g-4r83
Aliases: CVE-2025-41232 |
Spring Security authorization bypass for method security annotations on private methods Spring Security Aspects may not correctly locate method security … |
Vulnerable |
|
GHSA-8v5q-rhf3-jphm
Aliases: CVE-2025-41248 |
Spring Security annotation detection mechanism has authorization bypass The Spring Security annotation detection mechanism may not correctly resolve annotations on … |
Vulnerable |
|
GHSA-vqxh-445g-37fc
Aliases: CVE-2025-22234 |
Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide The fix applied in CVE-2025-22228 inadvertently broke the timing … |
Vulnerable |
|
GHSA-x2wq-9x2f-fhj7
Aliases: CVE-2026-22751 |
Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configured Vulnerability in Spring Spring … | There are no reported fixed by versions. |
|
GHSA-vxf7-qj7q-83fh
Aliases: CVE-2026-22746 |
Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider Vulnerability in Spring Spring Security. If an application is using … |
Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-hh3m-g4qj-4835
|
Spring Security Vulnerable to Authorization Bypass via Security Annotations Spring Security 6.4.0 - 6.4.3 may not correctly locate method security … |
CVE-2025-22223
|