Search for packages
| purl | pkg:maven/org.springframework.security/spring-security-web@5.7.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-mf92-479x-3373
Aliases: CVE-2026-22732 |
Spring Security HTTP Headers Are not Written Under Some Conditions When applications specify HTTP response headers for servlet applications using … | There are no reported fixed by versions. |
|
CVE-2022-31692
Aliases: GHSA-mmmh-wcxm-2wr4 |
Spring Security authorization rules can be bypassed via forward or include dispatcher types Spring Security, versions 5.7 prior to 5.7.5 … |
Vulnerable Vulnerable |
|
CVE-2023-20862
|
Incomplete Cleanup In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-c4q5-6c82-3qpw
Aliases: CVE-2024-38821 |
Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications Spring WebFlux applications that have Spring Security authorization … |
Vulnerable Vulnerable |
|
GHSA-293q-567p-wmwq
Aliases: CVE-2026-47838 |
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates In Spring Security Web, `SubjectDnX509PrincipalExtractor` does not correctly … |
Not vulnerable |
|
GHSA-x2r2-rvhq-2mqv
Aliases: CVE-2026-41706 |
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication … |
Not vulnerable Not vulnerable |