2026

Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persist

Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch (app

Spring Data REST's JSON Patch (application/json-patch+json) implementation does not apply the write-access filter to int

Spring Kafka's retry topic infrastructure did not sufficiently validate user-controlled header values before acting on t

When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap without bound by sending r

Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Sup

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a rep

Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs du

Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, al

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri("amqps://...") without also c

Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowE

Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser

Correlation IDs for replies in the RabbitTemplate.sendAndReceive() with the fixed reply queue are predictable due to int

Spring Data Relational does not properly escape binding values of externally-controlled input when using StringMatcher (

Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient

Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-contro

Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses withou

Spring Security Authorization Server's authorization endpoint performs insufficient validation of the request_uri parame

An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generat

An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository (saml2_assertin

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an

An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted is

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed

An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSO

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mon

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfe

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-ran

The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index st

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which

In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines

When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of th

A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side F

A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by

MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. W

lldpd is an implementation of IEEE 802.1ab (LLDP). Prior to version 1.0.22, lldpd_decode() in src/daemon/lldpd.c strips

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to vers

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to vers

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation v

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consu

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation v

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparo

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pa

OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbit

OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that al