A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring...
CVE-2026-47888
A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spr
2026-08-27 归档
今日共收录 918 条安全情报，包含 88 个 CVE，417 篇安全通告，以及 120 篇研究论文。
← 返回归档列表The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before...
CVE-2026-16567
The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before issuing a download token
The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when...
CVE-2026-47885
The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -
Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application...
CVE-2026-47884
Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping th
Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer...
CVE-2026-47875
Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deser
Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple...
CVE-2026-47881
Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for examp
Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent...
CVE-2026-47890
Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fr
UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching...
CVE-2026-47883
UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue ap
SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java...
CVE-2026-47864
SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInputStream and
The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to...
CVE-2026-19225
The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators,
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be...
CVE-2026-47886
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of
The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network...
CVE-2026-19223
The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an
The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.3.1 does not restrict...
CVE-2026-19715
The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.3.1 does not restrict access to the debug log it
A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path,...
CVE-2026-47887
A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a con
A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound...
CVE-2026-47880
A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String
A WebFlux application using functional endpoints and deployed with DispatcherServlet may be...
CVE-2026-47892
A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predi
The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation...
CVE-2026-19454
The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup
The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before...
CVE-2026-13416
The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming
A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies...
CVE-2026-47889
A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite att
Spring Data REST does not guard identifier (@Id) and version (@Version) properties against...
CVE-2026-47849
Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON Pa