Get ahead
VMware offers training and certification to turbo-charge your progress.
Learn moreThis page lists Spring advisories.
Reporting a vulnerability
To report a security vulnerability for a project within the Spring portfolio, see the Security Policy
| Severity | CVE ID | Project | Published | Fix Version |
|---|---|---|---|---|
| HIGH | CVE-2026-41707 | spring-security | August 20, 2026 | 5 versions |
| MEDIUM | CVE-2026-47834 | spring-data-jpa | August 20, 2026 | 6 versions |
| HIGH | CVE-2026-47836 | spring-cloud-config | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47837 | spring-cloud-config | August 20, 2026 | 4 versions |
| HIGH | CVE-2026-47841 | spring-security | August 20, 2026 | 6 versions |
| MEDIUM | CVE-2026-47842 | spring-security | August 20, 2026 | 8 versions |
| LOW | CVE-2026-47843 | reactor-netty | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47844 | reactor-netty | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47845 | reactor-netty | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47848 | reactor-netty | August 20, 2026 | 4 versions |
| HIGH | CVE-2026-47849 | spring-data-rest | August 20, 2026 | 7 versions |
| HIGH | CVE-2026-47851 | spring-ai | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47850 | spring-data-rest | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47856 | spring-integration | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47857 | reactor-core | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47859 | spring-integration | August 20, 2026 | 7 versions |
| HIGH | CVE-2026-47852 | spring-ai | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47860 | spring-amqp | August 20, 2026 | 6 versions |
| MEDIUM | CVE-2026-47861 | spring-integration | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47862 | spring-integration | August 20, 2026 | 6 versions |
| MEDIUM | CVE-2026-47863 | reactor-core | August 20, 2026 | 3 versions |
| MEDIUM | CVE-2026-47864 | spring-integration | August 20, 2026 | 7 versions |
| MEDIUM | CVE-2026-47874 | reactor-netty | August 20, 2026 | 4 versions |
| MEDIUM | CVE-2026-47875 | spring-batch | August 20, 2026 | 3 versions |
| HIGH | CVE-2026-47877 | spring-security | August 20, 2026 | 4 versions |
Get support
TrueSource Spring Enterprise offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.
Learn moreUpcoming events
Check out all the upcoming events in the Spring community.
View all