Spring Security Spring Authorization Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Spring Security Spring Authorization Server: 1 record(s), with affected versions and fixes.
CVE-2026-22752
Critical · 9.6
CWE-287 Jul 16, 2026
Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata
Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server.
This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.