11 entries matching spring — updated 2026-08-04 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-68494 | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint byp | HIGH | 8.7 | — | NVD | 2026-08-04 |
| CVE-2026-18401 | The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in S | MEDIUM | 6.9 | — | NVD | 2026-08-04 |
| CVE-2026-41695 | Spring Data: Unbounded property-path cache keyed by externally-supplied path string | HIGH | 7.5 | 29%ile | GitHub | 2026-07-31 |
| CVE-2026-47882 | When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud Foun | HIGH | 8.3 | 7%ile | NVD | 2026-07-30 |
| CVE-2026-47858 | Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running applicati | HIGH | 8.0 | 10%ile | NVD | 2026-07-30 |
| CVE-2026-47873 | The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network int | HIGH | 8.0 | 8%ile | NVD | 2026-07-30 |
| CVE-2026-59327 | Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string | MEDIUM | 4.4 | 0%ile | NVD | 2026-07-30 |
| CVE-2026-59328 | Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (SWT Browse | MEDIUM | 4.2 | 6%ile | NVD | 2026-07-30 |
| CVE-2026-59326 | The Spring Boot language server logs the raw value of the https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment vari | LOW | 3.3 | 1%ile | NVD | 2026-07-30 |
| CVE-2026-8338 | A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026. | CRITICAL | 9.2 | 22%ile | NVD | 2026-07-29 |
| CVE-2026-50338 | Azure Spring Apps Elevation of Privilege Vulnerability | HIGH | 8.2 | 38%ile | Microsoft | 2026-07-14 |