Skip to content
Threat Feed
Subscribe

Tag

Spring

4 briefs RSS
critical threat

Multiple Vulnerabilities in Spring Products Allow for Remote Code Execution and Data Breach

Multiple vulnerabilities in Spring products could allow a remote attacker to execute arbitrary code, cause a denial of service, or breach data confidentiality.

Cloud Function +1 spring rce dos data breach
2r 6t 1c
critical advisory

Spring Cloud Config Vulnerabilities Allow Secret Access and Directory Traversal

Multiple vulnerabilities in Spring Cloud Config, including CVE-2026-40981, CVE-2026-40982, and CVE-2026-41002, could allow unauthorized access to secrets and directory traversal attacks, potentially leading to data exposure and system compromise.

Spring Cloud Config spring cloud config vulnerability directory_traversal secret_access
2r 3c
medium threat

Spring Releases Security Updates for Multiple Spring Boot Versions

Spring released security advisories on April 23, 2026, addressing vulnerabilities in multiple Spring Boot versions, prompting users to update affected installations.

Spring Boot 4.0.x +4 spring spring-boot vulnerability patch
2r
medium advisory

VMware Tanzu Spring Framework and Spring Security Vulnerabilities Allow Security Bypass

An anonymous, remote attacker can exploit multiple vulnerabilities in VMware Tanzu Spring Security and VMware Tanzu Spring Framework to bypass security measures.

vmware spring security-bypass web-application
2r 1t