spring-projects/spring-security Security Advisories | GitStock

medium2026-06-10

Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache

GHSA-x2r2-rvhq-2mqv · CVE-2026-41706

low2026-06-10

Spring Security SAML2 Service Provider: Decryption Oracle Vulnerability from Unsigned SAML Response and Logout Payloads

GHSA-ww38-37g9-m3q3 · CVE-2026-41694

high2026-06-10

Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)

GHSA-m69x-pw9p-7j3q · CVE-2026-40988

high2026-06-10

Spring Security SAML2 Service Provider: RelyingPartyRegistration may run arbitrary code on HTML forms generated by Spring Security filters

GHSA-3pjj-qpw6-5fcm · CVE-2026-41003

high2026-06-10

Spring Security SAML2 Service Provider is vulnerable to Deserialization of Untrusted Data via JdbcAssertingPartyMetadataRepository

GHSA-2q7c-5gjm-7q23 · CVE-2026-40993

medium2026-04-22

Spring Security has Potential Security Misconfiguration when Using withIssuerLocation

GHSA-cvc6-q2cp-2xhw · CVE-2026-22748

high2026-04-22

Spring Security Doesn't Correctly Include Servlet Path in Path Matching of HttpSecurity#securityMatchers

GHSA-4wrg-8wpc-h923 · CVE-2026-22753

high2026-04-22

Spring Security Doesn't Correctly Include Servlet Path in Path Matching of XML Authorization Rules

GHSA-4vrc-j85c-598c · CVE-2026-22754

low2026-04-22

Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider

GHSA-vxf7-qj7q-83fh · CVE-2026-22746

medium2026-04-22

Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

GHSA-2jrg-rf5x-568g · CVE-2026-22747

medium2026-04-21

Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configured

GHSA-x2wq-9x2f-fhj7 · CVE-2026-22751

critical2026-03-20

Spring Security HTTP Headers Are not Written Under Some Conditions

GHSA-mf92-479x-3373 · CVE-2026-22732

medium2026-01-22

Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide

GHSA-vqxh-445g-37fc · CVE-2025-22234

high2025-09-16

Spring Security annotation detection mechanism has authorization bypass

GHSA-8v5q-rhf3-jphm · CVE-2025-41248

critical2025-05-21

Spring Security authorization bypass for method security annotations on private methods

GHSA-9pp5-9c7g-4r83 · CVE-2025-41232

medium2025-03-24

Spring Security Vulnerable to Authorization Bypass via Security Annotations

GHSA-hh3m-g4qj-4835 · CVE-2025-22223

high2025-03-20

Spring Security Does Not Enforce Password Length

GHSA-mg83-c7gq-rv5c · CVE-2025-22228

medium2024-12-02

Spring Framework has Authorization Bypass for Case Sensitive Comparisons

GHSA-q3v6-hm2v-pw99 · CVE-2024-38827

critical2024-10-28

Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications

GHSA-c4q5-6c82-3qpw · CVE-2024-38821

medium2024-08-20

Spring Security Missing Authorization vulnerability

GHSA-hmqf-wpq9-jq83 · CVE-2024-38810