spring
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 150 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 24, 2013 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check
In Spring AMQP the link credit never replenished on listener exception path
RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure
In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop
Spring Cloud Config Monitor Denial of Service
Spring Framework response splitting in ContentDisposition
Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creation
Potential for deserialization of untrusted types in Spring Cloud Stream
Monitor spring in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.