Visit Website →

Recent Items

CVE-2026-41843 — Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux

Affected: Spring Framework

Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources.

Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.

Updated on 2026-10-10T08:52:03.611306+00:00