JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check,...
CVE-2026-41732
JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any pac
2026-06-10 归档
今日共收录 1730 条安全情报，包含 831 个 CVE，478 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the...
CVE-2026-41728
Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter to int
Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition...
CVE-2026-41721
Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Sup
Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and...
CVE-2026-41694
Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses withou
Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps...
CVE-2026-41714
Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also c
Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are...
CVE-2026-41701
Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to int
An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0...
CVE-2026-40988
An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff...
CVE-2026-9753
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed
Spring Data MongoDB repository query methods annotated with @Query that use regex parameter...
CVE-2026-41696
Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient
Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied...
CVE-2026-41716
Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, al
Spring Data Relational does not properly escape binding values of externally-controlled input...
CVE-2026-41697
Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (
An authenticated user with the read role may read limited amounts of uninitialized stack memory...
CVE-2026-9754
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted is
When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API...
CVE-2026-40991
When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an
Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection...
CVE-2026-41717
Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs du
Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack...
CVE-2026-41711
Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowE
Spring Security Authorization Server's authorization endpoint performs insufficient validation of...
CVE-2026-41008
Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parame
An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary...
CVE-2026-41003
An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generat
An attacker with write permissions to the database table managed by...
CVE-2026-40993
An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_assertin
A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash...
CVE-2026-9740
A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by
An authorized user could trigger a server crash by running a query with a 2dsphere index on a...
CVE-2026-9752
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSO