Get ahead
VMware offers training and certification to turbo-charge your progress.
Learn moreThis page lists Spring advisories.
Reporting a vulnerability
To report a security vulnerability for a project within the Spring portfolio, see the Security Policy
| Severity | CVE ID | Project | Published | Fix Version |
|---|---|---|---|---|
| HIGH | CVE-2026-47835 | spring-ai | June 12, 2026 | 2 versions |
| HIGH | CVE-2026-41862 | spring-statemachine | June 11, 2026 | 3 versions |
| HIGH | CVE-2026-47825 | spring-cloud-gateway | June 11, 2026 | 7 versions |
| HIGH | CVE-2026-41708 | spring-cloud-sleuth | June 11, 2026 | 1 version |
| MEDIUM | CVE-2026-40986 | spring-webflow | June 10, 2026 | 5 versions |
| HIGH | CVE-2026-40987 | spring-integration | June 10, 2026 | 7 versions |
| MEDIUM | CVE-2026-40995 | spring-ws | June 10, 2026 | 6 versions |
| MEDIUM | CVE-2026-40996 | spring-ws | June 10, 2026 | 6 versions |
| HIGH | CVE-2026-40994 | spring-ws | June 10, 2026 | 6 versions |
| MEDIUM | CVE-2026-40997 | spring-ws | June 10, 2026 | 6 versions |
| HIGH | CVE-2026-40998 | spring-ws | June 10, 2026 | 6 versions |
| HIGH | CVE-2026-40999 | spring-ws | June 10, 2026 | 6 versions |
| LOW | CVE-2026-41000 | spring-ws | June 10, 2026 | 6 versions |
| MEDIUM | CVE-2026-40992 | spring-boot | June 10, 2026 | 5 versions |
| MEDIUM | CVE-2026-41001 | spring-boot | June 10, 2026 | 7 versions |
| HIGH | CVE-2026-41699 | spring-graphql | June 10, 2026 | 5 versions |
| HIGH | CVE-2026-41700 | spring-graphql | June 10, 2026 | 6 versions |
| MEDIUM | CVE-2026-40985 | spring-webflow | June 10, 2026 | 5 versions |
| HIGH | CVE-2026-41856 | spring-graphql | June 10, 2026 | 6 versions |
| HIGH | CVE-2026-40988 | spring-security | June 09, 2026 | 8 versions |
| MEDIUM | CVE-2026-40991 | spring-restdocs | June 09, 2026 | 5 versions |
| HIGH | CVE-2026-40993 | spring-security | June 09, 2026 | 2 versions |
| HIGH | CVE-2026-41003 | spring-security | June 09, 2026 | 8 versions |
| MEDIUM | CVE-2026-41008 | spring-security | June 09, 2026 | 4 versions |
| HIGH | CVE-2026-41695 | spring-data-commons | June 09, 2026 | 5 versions |
Get support
Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.
Learn moreUpcoming events
Check out all the upcoming events in the Spring community.
View all