VMware Spring Framework vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 20263

Newest CVEs

• CVE-2026-22745

  CVE-2026-22745 : Denial of service in static resource handling on Windows platforms

  VMware · Spring Framework

  Medium5.3
• CVE-2026-22741

  Static resource cache poisoning in Spring MVC and WebFlux

  VMware · Spring Framework

  Low3.1
• CVE-2026-22740

  Spring Framework DoS with Multipart Temp Files in WebFlux

  VMware · Spring Framework

  Medium6.5
• CVE-2025-41254

  Spring Framework STOMP CSRF Vulnerability

  VMware · Spring Framework

  Medium4.3
• CVE-2025-41249

  CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

  VMware · Spring Framework

  High7.5
• CVE-2025-41242

  CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers

  VMware · Spring Framework

  Medium5.9
• CVE-2025-41234

  RFD Attack via “Content-Disposition” Header Sourced from Request

  VMware · Spring Framework

  Medium6.5