Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-webflux@6.1.26
purl pkg:maven/org.springframework/spring-webflux@6.1.26
Tags Ghost
Next non-vulnerable version 7.0.9
Latest non-vulnerable version 7.0.9
Risk score 3.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-wg35-8jpf-2xv3
Aliases:
CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be … There are no reported fixed by versions.
GHSA-5843-p793-ghmm
Aliases:
CVE-2026-22740
Spring Framework DoS with Multipart Temp Files in WebFlux A WebFlux server application that processes multipart requests creates temp files … There are no reported fixed by versions.
GHSA-6p4f-wcwh-5vvm
Aliases:
CVE-2026-22745
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application … There are no reported fixed by versions.
This package is not known to fix any advisories.