SS
Product
spring security
26
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 12Low 1
Watch
Add spring security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59270 | 9.1 | Aug 27 | Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces Affected: 7.1.0; 7.0.0 through 7.0.6; 6.5.0 through 6.5.11; 6.4.0 through 6.4.18; 5.8.0 through 5.8.27; 5.7.0 through 5.7.25 |
| CVE-2025-41232 | 9.1 | May 21 | CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methods Affected: 6.4.x before 6.4.6 |
Showing 2