Get ahead
VMware offers training and certification to turbo-charge your progress.
Learn moreThis page lists Spring advisories.
Reporting a vulnerability
To report a security vulnerability for a project within the Spring portfolio, see the Security Policy
| Severity | CVE ID | Project | Published | Fix Version |
|---|---|---|---|---|
| MEDIUM | CVE-2026-47834 | Spring Data JPA | August 20, 2026 | 4 versions |
| HIGH | CVE-2026-41707 | Spring Security | August 20, 2026 | 5 versions |
| HIGH | CVE-2026-47836 | Spring Cloud Config | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47837 | Spring Cloud Config | August 20, 2026 | 4 versions |
| LOW | CVE-2026-47843 | Reactor Netty | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47844 | Reactor Netty | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47845 | Reactor Netty | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47842 | Spring Security | August 20, 2026 | 8 versions |
| MEDIUM | CVE-2026-47848 | Reactor Netty | August 20, 2026 | 4 versions |
| HIGH | CVE-2026-47841 | Spring Security | August 20, 2026 | 6 versions |
| HIGH | CVE-2026-47851 | Spring AI | August 20, 2026 | 3 versions |
| HIGH | CVE-2026-47852 | Spring AI | August 20, 2026 | 3 versions |
| MEDIUM | CVE-2026-47850 | Spring Data REST | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47856 | Spring Integration | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47857 | Reactor Core | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47859 | Spring Integration | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47860 | Spring AMQP | August 20, 2026 | 6 versions |
| MEDIUM | CVE-2026-47861 | Spring Integration | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47862 | Spring Integration | August 20, 2026 | 6 versions |
| HIGH | CVE-2026-47849 | Spring Data REST | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47863 | Reactor Core | August 20, 2026 | 3 versions |
| MEDIUM | CVE-2026-47864 | Spring Integration | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47874 | Reactor Netty | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47875 | Spring Batch | August 20, 2026 | 3 versions |
| HIGH | CVE-2026-47877 | Spring Security | August 20, 2026 | 4 versions |
Get support
Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.
Learn moreUpcoming events
Check out all the upcoming events in the Spring community.
View all