VDB
GHSA-6p4f-wcwh-5vvm
GHSA-6p4f-wcwh-5vvm
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Maven | org.springframework:spring-webmvc | 7.0.0, 6.2.0, 6.1.0 |
| Maven | org.springframework:spring-webflux | 7.0.0, 6.2.0, 6.1.0 |
Timeline
- Apr 29, 2026 CVE Published
- May 6, 2026 CVE Updated
- May 7, 2026 Security Advisory