org.springframework:spring-webmvc vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-47890Criticalorg.springframework:spring-webflux: Spring Framework Server Sent Event stream corruption while rendering fragmentsCVE-2026-47884Criticalorg.springframework:spring-webmvc: Spring Framework Improper Path Limitation in XsltViewCVE-2026-41853Mediumorg.springframework:spring-webmvc: Spring Framework Multipart Request Smuggling in Spring MVC and WebFluxCVE-2026-41846Mediumorg.springframework:spring-webmvc: Spring Framework Cross-site Scripting via JSP Form TagsCVE-2026-41843Mediumorg.springframework:spring-webmvc: Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFluxCVE-2026-41844Mediumorg.springframework:spring-webmvc: Spring Framework Open Redirect in Spring MVC and WebFluxCVE-2026-41845Highorg.springframework:spring-webmvc: Spring Framework Cross-site Scripting via JavaScriptUtilsCVE-2026-41841Mediumorg.springframework:spring-webmvc: Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxCVE-2026-41842Highorg.springframework:spring-webmvc: Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFluxCVE-2026-22741Loworg.springframework:spring-webflux: Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.CVE-2026-22745Mediumorg.springframework:spring-webflux: Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resourcesCVE-2026-22735Loworg.springframework:spring-webmvc: Spring MVC and WebFlux has Server Sent Event stream corruptionCVE-2026-22737Mediumorg.springframework:spring-webmvc: Spring Framework Improper Path Limitation with Script View TemplatesCVE-2025-41242Mediumorg.springframework:spring-webmvc: Spring Framework MVC Applications Path Traversal VulnerabilityCVE-2024-38819Highorg.springframework:spring-webflux: Spring Framework Path Traversal vulnerabilityCVE-2024-38828Mediumorg.springframework:spring-webmvc: Spring MVC controller vulnerable to a DoS attackCVE-2024-38816Highorg.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworksCVE-2023-34053Highorg.springframework:spring-webmvc: Spring Framework vulnerable to denial of serviceCVE-2023-20860Criticalorg.springframework:spring: Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatchCVE-2014-1904Mediumorg.springframework:spring-webmvc: Improper Neutralization of Input During Web Page Generation in Spring FrameworkCVE-2014-3625Mediumorg.springframework:spring-webmvc: Improper Limitation of a Pathname to a Restricted Directory in Spring FrameworkCVE-2014-0225Highorg.springframework:spring-webmvc: Improper Restriction of XML External Entity Reference in Spring FrameworkCVE-2014-0054Mediumorg.springframework:spring-webmvc: Cross-Site Request Forgery in Spring FrameworkCVE-2022-22965Criticalorg.springframework:spring-beans: Remote Code Execution in Spring FrameworkCVE-2020-5397Mediumorg.springframework:spring-webmvc: CSRF attack via CORS preflight requests with Spring MVC or Spring WebFlux

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo