今日共收录 1697 条安全情报，包含 762 个 CVE，507 篇安全通告，以及 120 篇研究论文。
← 返回归档列表CVE-2026-59301
Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Fu
CVE-2026-59300
Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Func
CVE-2026-59299
Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Sp
CVE-2026-59298
Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cl
CVE-2026-59297
Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Functi
CVE-2026-59294
ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without strippin
CVE-2026-59293
Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks m
CVE-2026-59292
PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdi
CVE-2026-59291
Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Sprin
CVE-2026-59289
Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-sup
CVE-2026-59288
The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacke
CVE-2026-59287
Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Sp
CVE-2026-59286
The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Inte
CVE-2026-59285
Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spri
CVE-2026-59284
There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commo
CVE-2026-59283
Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable
CVE-2026-59282
Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a
CVE-2026-59281
Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then rende
CVE-2026-59277
Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an
CVE-2026-59276
Several components in Spring Security compare security-sensitive values using standard string equality (String.equals())