Spring Security
Approved changes feed: RSS · Atom
cpe:2.3:a:spring:spring_security:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Spring (4c7a31af-cbd7-516f-b1ce-2d5f574797bc) |
|---|---|
| Product | Spring Security (d6abf850-9d34-5e62-84bb-01d6199dd274) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-47838 |
vulnerable | 2026-07-29 00:55:00.444470 |
Unauthorized User Impersonation when Using X.509 Client Certificates
MEDIUM (6.8)
SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user.
Affected versions:
Spring Security 5.7.0 through 5.7.24; 5.8.0 through 5.8.26; 6.3.0 through 6.3.17; 6.4.0 through 6.4.17; 6.5.0 through 6.5.10.
Published: 2026-06-09T23:50:07.988Z
Updated: 2026-06-30T21:49:56.180Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41706 |
vulnerable | 2026-07-29 00:49:31.454017 |
Open Redirect When Using CookieRequestCache
MEDIUM (6.1)
Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login. In affected versions, the full absolute URL is stored in the cookie and is used without validation as the post-login redirect target.
Affected versions:
Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.
Published: 2026-06-09T23:47:58.903Z
Updated: 2026-06-27T21:27:02.537Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41694 |
vulnerable | 2026-07-29 00:49:31.435259 |
SAML Payloads Decrypted Without Valid Signature
LOW (3.7)
Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a valid signature, attackers may be able to craft these SAML payloads and use the Service Provider as a decryption oracle.
Affected versions:
Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.
Published: 2026-06-09T23:47:17.784Z
Updated: 2026-06-27T21:25:20.803Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41008 |
vulnerable | 2026-07-29 00:49:30.844479 |
Spring Security Authorization Server Open Redirect via request_uri
MEDIUM (6.1)
Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an invalid request_uri and an arbitrary, unvalidated redirect_uri, which can lead to an Open Redirect vulnerability.
Affected versions:
Spring Security 7.0.0 through 7.0.5.
Spring Authorization Server 1.5.0 through 1.5.7.
Published: 2026-06-09T23:47:07.292Z
Updated: 2026-06-27T21:30:17.016Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41003 |
vulnerable | 2026-07-29 00:49:30.837870 |
Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting
HIGH (7.6)
An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.
Affected versions:
Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.
Published: 2026-06-09T23:46:53.683Z
Updated: 2026-06-27T21:24:40.807Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40993 |
vulnerable | 2026-07-29 00:49:30.832600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40988 |
vulnerable | 2026-07-29 00:49:30.825965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22754 |
vulnerable | 2026-06-08 07:51:13.757429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22753 |
vulnerable | 2026-06-08 07:51:13.756867 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22751 |
vulnerable | 2026-06-08 07:51:13.756541 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22748 |
vulnerable | 2026-06-08 07:51:13.750718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22747 |
vulnerable | 2026-06-08 07:51:13.750181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22746 |
vulnerable | 2026-06-08 07:51:13.749771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22733 |
vulnerable | 2026-06-08 07:51:13.738674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41232 |
vulnerable | 2026-06-08 07:25:06.770031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22234 |
vulnerable | 2026-06-08 07:10:52.513344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22228 |
vulnerable | 2026-06-08 07:10:52.505382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22223 |
vulnerable | 2026-06-08 07:10:52.388479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38810 |
vulnerable | 2026-06-08 06:41:48.148249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22234 |
vulnerable | 2026-06-08 06:29:34.184375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3795 |
vulnerable | 2026-06-08 05:13:56.006173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11272 |
vulnerable | 2026-06-08 05:12:36.782822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.