Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-web@5.8.25
purl pkg:maven/org.springframework.security/spring-security-web@5.8.25
Tags Ghost
Next non-vulnerable version 6.5.11
Latest non-vulnerable version 7.0.6
Risk score 2.8
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-x2r2-rvhq-2mqv
Aliases:
CVE-2026-41706
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication … There are no reported fixed by versions.
This package is not known to fix any advisories.