Spring Security vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Spring Security products: 1 record(s), with severity, exploitation and fixes.

Spring Authorization Server 1

Exploited only (KEV) →

CVE-2026-22752 Critical · 9.6 CWE-287 Jul 16, 2026

Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.