spring
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 81 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 24, 2013 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
live information startup mode is vulnerable for remote code execution
Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata
Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration
Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores
Spring GraphQL Annotation Detection Vulnerability
WSS4J validation does not use configured replay cache
Spring WS SSRF via unvalidated WS-Addressing reply destinations
Jaxp13 XPath XXE via StreamSource and SAXSource
Monitor spring in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.