Most recent entries from all

bdu:2024-08880

2026-10-04T13:36:13.399958+00:00

bdu:2024-08880

certfr-2024-avi-0914 — Une vulnérabilité a été découverte dans les produits Spring. Elle permet à un attaquant de provoquer un contournement d…

2026-10-04T13:36:13.400004+00:00

certfr-2024-avi-0914

Withdrawn: CLEANSTART-2026-GZ54612 — In Spring Security, versions 5

2026-10-04T13:36:13.400031+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. In Spring Security, versions 5. See references for individual vulnerability details.

EUVD-2026-211837

2026-10-04T13:36:13.400073+00:00

EUVD-2026-211837

fkie_cve-2024-38821

2026-10-04T13:36:13.400093+00:00

Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain circumstances.

For this to impact an application, all of the following must be true:

* It must be a WebFlux application * It must be using Spring's static resources support * It must have a non-permitAll authorization rule applied to the static resources support

GHSA-c4q5-6c82-3qpw — Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications

2026-10-04T13:36:13.400135+00:00

Affected: Maven: org.springframework.security:spring-security-web

Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain circumstances.

For this to impact an application, all of the following must be true:

* It must be a WebFlux application * It must be using Spring's static resources support * It must have a non-permitAll authorization rule applied to the static resources support

WID-SEC-W-2024-3275 — VMware Tanzu Spring Security: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

2026-10-04T13:36:13.400186+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen.