Search for packages
| purl | pkg:maven/org.springframework/spring-webflux@5.0.16.RELEASE |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-36p3-wjmg-h94x
Aliases: CVE-2022-22965 |
Remote Code Execution in Spring Framework Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability … |
Vulnerable |
|
CVE-2020-5421
|
Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-vqgp-pf68-6947
Aliases: CVE-2026-41847 |
Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL Spring WebFlux applications may be vulnerable to a security bypass … | There are no reported fixed by versions. |
|
GHSA-g5vr-rgqm-vf78
Aliases: CVE-2024-38819 |
Spring Framework Path Traversal vulnerability Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to … | There are no reported fixed by versions. |
|
GHSA-wg35-8jpf-2xv3
Aliases: CVE-2026-22741 |
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-5843-p793-ghmm
Aliases: CVE-2026-22740 |
Spring Framework DoS with Multipart Temp Files in WebFlux A WebFlux server application that processes multipart requests creates temp files … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-6p4f-wcwh-5vvm
Aliases: CVE-2026-22745 |
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application … |
Vulnerable Vulnerable |
|
GHSA-h3qp-gqrc-q736
Aliases: CVE-2026-41844 |
Spring Framework Open Redirect in Spring MVC and WebFlux A Spring MVC or Spring WebFlux application which configures a mapping … |
Vulnerable Vulnerable |
|
GHSA-mq64-j8f9-9gcj
Aliases: CVE-2026-41841 |
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable |
|
GHSA-83f7-v6px-pp3h
Aliases: CVE-2026-41840 |
Spring Framework Denial of Service via Multipart Requests in WebFlux Spring WebFlux applications are vulnerable to Denial of Service (DoS) … |
Vulnerable Vulnerable |
|
GHSA-72pg-x5f8-j25j
Aliases: CVE-2026-41843 |
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable |
|
GHSA-x23c-287f-qqv5
Aliases: CVE-2026-41842 |
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable |
|
GHSA-4hfh-6x8g-gwpp
Aliases: CVE-2026-41839 |
Spring Framework Escalation via Session Fixation in WebFlux A WebFlux application with a compromised subdomain (for example, compromised via cross-site … |
Vulnerable Vulnerable |
|
GHSA-cjpg-rgq5-fr37
Aliases: CVE-2026-41853 |
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable to Multipart request … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-8wx2-9q48-vm9r
|
RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application In Spring Framework, versions … |
CVE-2020-5398
|
|
CVE-2020-5398
|
Download of Code Without Integrity Check In Spring Framework, an application is vulnerable to a reflected file download (RFD) attack … |