CVE-2026-47889

概要

参考情報

• spring.io/security/cve-2026-47889 · Vendor Advisory

spring framework のその他の脆弱性

• CVE-2026-59314低 3.7Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input …
• CVE-2026-59313緊急 9.8Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring F…
• CVE-2026-59283緊急 9.1Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard b…
• CVE-2026-59282高 7.5Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may b…
• CVE-2026-59281中 6.1Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using…