VMware Spring Security
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-22732 | 5.7.0 – 5.7.21 ; 5.8.0 – 5.8.23 ; 6.3.0 – 6.3.14 ; … | Under Some Conditions Spring Security HTTP Headers Are not Written | CRITICAL 9.1 | 0.5 % | ||
| CVE-2025-41248 | 6.4.x – < 6.4.11 ; 6.5.x – < 6.5.5 | CVE-2025-41248: Spring Security authorization bypass for method security annotations on parameterized types | HIGH 7.5 | 0.4 % |