| Package | Affected versions | Patched versions |
|---|---|---|
| spring security | ≥ 7.0.0, < 7.0.6.1≥ 7.1.0, < 7.1.0.1 | 7.0.6.17.1.0.1 |
Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free