Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:39:36 +0000 CVE-2026-41003 — Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting https://vulnerability.circl.lu/vuln/cve-2026-41003 <p><strong>Affected:</strong> Spring Security</p> <p>An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.</p> <p>Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.</p> <p><strong>Affected:</strong> Spring Security</p> <p>An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters.</p> <p>Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.</p> https://vulnerability.circl.lu/vuln/cve-2026-41003