Security advisories

medium2026-06-10

CVE-2026-41714-Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBean

spring-projects/spring-amqp · GHSA-p8qj-fj6r-w7q9

medium2026-06-10

CVE-2026-41701-Spring AMQP Has Predictable Correlation IDs in RabbitTemplate.sendAndReceive() with Fixed Reply Queue

spring-projects/spring-amqp · GHSA-p5f7-rjhp-pxvc

high2026-06-10

CVE-2026-40988-Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)

spring-projects/spring-security · GHSA-m69x-pw9p-7j3q

medium2026-06-10

CVE-2026-41696-Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods

spring-projects/spring-data-mongodb · GHSA-hc43-m36c-8v33

high2026-06-10

CVE-2026-41716-Spring Data Commons: Heap exhaustion from unbounded property-lookup cache retaining crafted string keys

spring-projects/spring-data-commons · GHSA-9fw2-h3hf-293r

medium2026-06-10

CVE-2026-41697-Spring Data Relational: Attackers can supply wildcard characters to perform boolean-based blind data inference

spring-projects/spring-data-relational · GHSA-8r2h-xh92-gq57

medium2026-06-10

CVE-2026-40991-Spring REST Docs REST Assured & WebFlux are vulnerable to Improper Restriction of XML External Entity Reference

spring-projects/spring-restdocs · GHSA-6rpq-6vv2-5222

high2026-06-10

CVE-2026-41717-Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

spring-projects/spring-data-mongodb · GHSA-5whc-4q84-fj73

medium2026-06-10

CVE-2026-41711-Spring Data Commons: StackOverflowException when parsing Sort parameters (DoS)

spring-projects/spring-data-commons · GHSA-5vpf-xvv7-c8vh

medium2026-06-10

CVE-2026-41008-Spring Security OAuth2 Authorization Server: Authorization endpoint performs insufficient validation of the request_uri parameter

spring-projects/spring-authorization-server · GHSA-4r8w-73jc-3m7q

high2026-06-10

CVE-2026-41003-Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters

spring-projects/spring-security · GHSA-3pjj-qpw6-5fcm

high2026-06-10

CVE-2026-40993-Spring Security SAML2 Service Provider is vulnerable to Deserialization of Untrusted Data via JdbcAssertingPartyMetadataRepository

spring-projects/spring-security · GHSA-2q7c-5gjm-7q23

critical2026-06-09

CVE-2026-48030-Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter

pheditor/pheditor · GHSA-jvc5-6g7q-c843

high2026-06-09

Dex: Token-exchange endpoint is missing AllowedConnectors enforcement

dexidp/dex · GHSA-7qjx-gp9h-65qj

low2026-06-09

CVE-2026-47068-PhoenixStorybook has cross-session PubSub topic injection via URL parameter

phenixdigital/phoenix_storybook · GHSA-mrhx-6pw9-q5fh

high2026-06-09

CVE-2026-8469-PhoenixStorybook: Unbounded atom creation from LiveView event params (atom-table DoS)

phenixdigital/phoenix_storybook · GHSA-833p-95jq-929q

critical2026-06-09

CVE-2026-8467-PhoenixStorybook: Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

phenixdigital/phoenix_storybook · GHSA-55hg-8qxv-qj4p

medium2026-06-09

CVE-2026-47767-SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch

symfony/symfony · GHSA-fqc7-9xjw-jrh3

medium2026-06-09

CVE-2026-47242-Net::IMAP: Command Injection via ID command argument

ruby/net-imap · GHSA-46q3-7gv7-qmgg

low2026-06-09

CVE-2026-47241-Net::IMAP: Denial of Service via incomplete raw argument validation

ruby/net-imap · GHSA-c4fp-cxrr-mj66