Search for packages
| purl | pkg:maven/org.springframework/spring-webflux@5.0.1.RELEASE |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-5397
|
Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2018-1271
|
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-36p3-wjmg-h94x
Aliases: CVE-2022-22965 |
Remote Code Execution in Spring Framework Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability … |
Vulnerable |
|
GHSA-8wx2-9q48-vm9r
Aliases: CVE-2020-5398 |
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application In Spring Framework, versions … |
Vulnerable |
|
CVE-2020-5421
|
Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-15756
|
Uncontrolled Resource Consumption Spring Framework provides support for range requests when serving static resources through the `ResourceHttpRequestHandler`. A malicious user … |
Vulnerable Vulnerable |
|
CVE-2020-5398
|
Download of Code Without Integrity Check In Spring Framework, an application is vulnerable to a reflected file download (RFD) attack … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-1272
|
Improper Privilege Management When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and … |
Vulnerable Vulnerable |
|
GHSA-vqgp-pf68-6947
Aliases: CVE-2026-41847 |
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL Spring WebFlux applications may be vulnerable to a security bypass … | There are no reported fixed by versions. |
|
GHSA-g5vr-rgqm-vf78
Aliases: CVE-2024-38819 |
Spring Framework Path Traversal vulnerability Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to … | There are no reported fixed by versions. |
|
GHSA-wg35-8jpf-2xv3
Aliases: CVE-2026-22741 |
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-5843-p793-ghmm
Aliases: CVE-2026-22740 |
Spring Framework DoS with Multipart Temp Files in WebFlux A WebFlux server application that processes multipart requests creates temp files … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-6p4f-wcwh-5vvm
Aliases: CVE-2026-22745 |
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application … |
Vulnerable Vulnerable |
|
GHSA-h3qp-gqrc-q736
Aliases: CVE-2026-41844 |
Spring Framework Open Redirect in Spring MVC and WebFlux A Spring MVC or Spring WebFlux application which configures a mapping … |
Vulnerable Vulnerable |
|
GHSA-mq64-j8f9-9gcj
Aliases: CVE-2026-41841 |
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable |
|
GHSA-83f7-v6px-pp3h
Aliases: CVE-2026-41840 |
Spring Framework Denial of Service via Multipart Requests in WebFlux Spring WebFlux applications are vulnerable to Denial of Service (DoS) … |
Vulnerable Vulnerable |
|
GHSA-72pg-x5f8-j25j
Aliases: CVE-2026-41843 |
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable |
|
GHSA-x23c-287f-qqv5
Aliases: CVE-2026-41842 |
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable |
|
GHSA-4hfh-6x8g-gwpp
Aliases: CVE-2026-41839 |
Spring Framework Escalation via Session Fixation in WebFlux A WebFlux application with a compromised subdomain (for example, compromised via cross-site … |
Vulnerable Vulnerable |
|
GHSA-cjpg-rgq5-fr37
Aliases: CVE-2026-41853 |
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable to Multipart request … |
Vulnerable Vulnerable |