Search for packages
| purl | pkg:maven/org.springframework/spring-webflux@6.2.14 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-6hcq-hmm3-jj3c
Aliases: CVE-2026-22735 |
Spring MVC and WebFlux has Server Sent Event stream corruption Spring MVC and WebFlux applications are vulnerable to stream corruption … |
Vulnerable |
|
GHSA-4773-3jfm-qmx3
Aliases: CVE-2026-22737 |
Spring Framework Improper Path Limitation with Script View Templates Use of Java scripting engine enabled (e.g. JRuby, Jython) template views … |
Vulnerable |
|
GHSA-wg35-8jpf-2xv3
Aliases: CVE-2026-22741 |
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-5843-p793-ghmm
Aliases: CVE-2026-22740 |
Spring Framework DoS with Multipart Temp Files in WebFlux A WebFlux server application that processes multipart requests creates temp files … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-6p4f-wcwh-5vvm
Aliases: CVE-2026-22745 |
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-h3qp-gqrc-q736
Aliases: CVE-2026-41844 |
Spring Framework Open Redirect in Spring MVC and WebFlux A Spring MVC or Spring WebFlux application which configures a mapping … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-mq64-j8f9-9gcj
Aliases: CVE-2026-41841 |
Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-83f7-v6px-pp3h
Aliases: CVE-2026-41840 |
Spring Framework Denial of Service via Multipart Requests in WebFlux Spring WebFlux applications are vulnerable to Denial of Service (DoS) … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-72pg-x5f8-j25j
Aliases: CVE-2026-41843 |
Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-x23c-287f-qqv5
Aliases: CVE-2026-41842 |
Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-4hfh-6x8g-gwpp
Aliases: CVE-2026-41839 |
Spring Framework Escalation via Session Fixation in WebFlux A WebFlux application with a compromised subdomain (for example, compromised via cross-site … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-cjpg-rgq5-fr37
Aliases: CVE-2026-41853 |
Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux Spring MVC and WebFlux applications are vulnerable to Multipart request … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2026-47892
Aliases: GHSA-9qf2-26p9-2q2q |
Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints A WebFlux application using functional endpoints and deployed with DispatcherServlet may … |
Not vulnerable |
|
GHSA-j9f9-w8pj-32f8
Aliases: CVE-2026-47890 |
Spring Framework Server Sent Event stream corruption while rendering fragments Spring MVC and WebFlux applications are vulnerable to stream corruption … | There are no reported fixed by versions. |
|
GHSA-9qf2-26p9-2q2q
Aliases: CVE-2026-47892 |
Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints A WebFlux application using functional endpoints and deployed with DispatcherServlet may … | There are no reported fixed by versions. |