Spring Spring HATEOAS vulnerabilities

3 published CVEs name Spring Spring HATEOAS among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20231
20262

Newest CVEs

CVE-2026-41007
Spring HATEOAS heap exhaustion through unbounded internal caching
Spring · Spring HATEOAS
High7.5
CVE-2026-41006
Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration
Spring · Spring HATEOAS
High7.5
CVE-2023-34036
Forwarded header exploit with Spring HATEOAS on WebFlux
Spring · Spring HATEOAS
Medium5.3

Most common weaknesses