Skip to content
Threat Feed
Subscribe

Tag

Header-Manipulation

1 brief RSS
high advisory

VMware Spring Security Content-Length header suppression (CVE-2026-22732)

A vulnerability in Spring Security versions < 7.0.4 allows attackers to bypass security header injection by manipulating the Content-Length header, leading to the absence of X-Frame-Options and other security headers.

Spring Security vulnerability web-application spring-security header-manipulation
1t 1c