Record · corpus.blog/posts/01a0fb5c-a625-7004-b94d-6370e76b3be0

When "Critical" Loses Context: The Reality of Spring CVEs

research.jfrog.com · published 3 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at research.jfrog.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 20
Words captured: 1,565

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://spring.io/security

spring.io

https://www.nist.gov/itl/executive-order-14028-improving-nations-cybersecurity/securing-critical-software/critical

nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2026-47884

nvd.nist.gov

cve-2026-47884 - MEDIUM - Spring Framework Improper Path Limitation in XsltView Read at the source ↗

spring.io

https://github.com/spring-projects/spring-framework/commit/d31f7a5a801b

github.com

https://nvd.nist.gov/vuln/detail/CVE-2026-47890

nvd.nist.gov

cve-2026-47890 - LOW - Spring Framework Server Sent Event stream corruption while rendering fragments Read at the source ↗

spring.io

https://github.com/spring-projects/spring-framework/commit/1994e0ebd077

github.com

https://nvd.nist.gov/vuln/detail/CVE-2026-47891

nvd.nist.gov

cve-2026-47891 - MEDIUM - Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder Read at the source ↗

spring.io

https://github.com/spring-projects/spring-framework/commit/e12f0761f3bf

github.com

https://nvd.nist.gov/vuln/detail/CVE-2026-47892

nvd.nist.gov

cve-2026-47892 - MEDIUM - Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints Read at the source ↗

spring.io

https://github.com/spring-projects/spring-framework/commit/07cbd482a000

github.com

https://nvd.nist.gov/vuln/detail/CVE-2026-59313

nvd.nist.gov

https://spring.io/security/cve-2026-59313

spring.io

https://github.com/spring-projects/spring-framework/commit/35921cc01f81

github.com

https://nvd.nist.gov/vuln/detail/CVE-2026-59283

nvd.nist.gov

https://spring.io/security/cve-2026-59283

spring.io

https://github.com/spring-projects/spring-framework/commit/0d08f8dfaf26

github.com