Spring CVE-2026-22718

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. Rated critical severi

Access control bypass in SpringBlade v4.5.0 importUser function allows low-privileged users to import sensitive user dat

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant

SpringBlade v4.5.0 has an access control flaw in authRoutes allowing low-privileged users to escalate to admin through t

Spring Security Aspects may not correctly locate method security annotations on private methods. Rated critical severity

EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been crea

Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to

Denial of service in Micrometer Tracing's Brave bridge allows remote unauthenticated attackers to crash Spring Boot 3.x+

Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. Ra

Spring Data Geode's snapshot import functionality uses predictable temporary directories with overly permissive permissi

The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarc

The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarch