Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Vulnerabilities
| Vulnerability |
Severity |
 CVSS |
Dependency |
Type |
Fixed in (spring-expression version) |
Remediation Possible** |
| CVE-2026-59283 |
 Critical |
9.1 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
https://github.com/spring-projects/spring-framework.git - v7.0.9,org.springframework:spring-expression:7.0.9 |
✅ |
| CVE-2026-47886 |
 High |
7.5 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
org.springframework:spring-expression:7.0.9 |
✅ |
| CVE-2026-41850 |
High |
7.5 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
org.springframework:spring-expression:6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,https://github.com/spring-projects/spring-framework.git - v6.2.19,org.springframework:spring-expression:7.0.8 |
✅ |
| CVE-2026-41849 |
High |
7.5 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
N/A |
❌ |
| CVE-2023-20863 |
 Medium |
6.5 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
5.2.24.RELEASE |
✅ |
| CVE-2023-20861 |
Medium |
6.5 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
5.2.23.RELEASE |
✅ |
| CVE-2022-22950 |
Medium |
6.5 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
5.2.20.RELEASE |
✅ |
| CVE-2026-41851 |
Medium |
5.3 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
https://github.com/spring-projects/spring-framework.git - v6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,org.springframework:spring-expression:7.0.8,org.springframework:spring-expression:6.2.19 |
✅ |
| CVE-2024-38808 |
Medium |
4.3 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
5.3.39 |
✅ |
| CVE-2026-41852 |
 Low |
3.7 |
spring-expression-5.1.1.RELEASE.jar |
Direct |
org.springframework:spring-expression:6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,org.springframework:spring-expression:7.0.8,https://github.com/spring-projects/spring-framework.git - v6.2.19 |
✅ |
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-2026-59283
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
Publish Date: 2026-08-27
URL: CVE-2026-59283
CVSS 3 Score Details (9.1)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2026-08-27
Fix Resolution: https://github.com/spring-projects/spring-framework.git - v7.0.9,org.springframework:spring-expression:7.0.9
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2026-47886
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) is used with a BigDecimal or BigInteger operand and a large exponent value.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
Publish Date: 2026-08-27
URL: CVE-2026-47886
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2026-47886
Release Date: 2026-08-27
Fix Resolution: org.springframework:spring-expression:7.0.9
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2026-41850
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). By providing a specially crafted expression, an attacker can trigger excessive resource consumption during evaluation, leading to application degradation or unavailability.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
Publish Date: 2026-06-09
URL: CVE-2026-41850
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2026-41850
Release Date: 2026-06-09
Fix Resolution: org.springframework:spring-expression:6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,https://github.com/spring-projects/spring-framework.git - v6.2.19,org.springframework:spring-expression:7.0.8
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2026-41849
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers excessive resource consumption, resulting in a Denial of Service (DoS).
Affected versions:
Spring Framework 5.3.0 through 5.3.48.
Publish Date: 2026-06-09
URL: CVE-2026-41849
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
CVE-2023-20863
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
Publish Date: 2023-04-13
URL: CVE-2023-20863
CVSS 3 Score Details (6.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2023-20863
Release Date: 2023-04-13
Fix Resolution: 5.2.24.RELEASE
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2023-20861
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
Publish Date: 2023-03-23
URL: CVE-2023-20861
CVSS 3 Score Details (6.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2023-20861
Release Date: 2023-03-23
Fix Resolution: 5.2.23.RELEASE
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2022-22950
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
Publish Date: 2022-04-01
URL: CVE-2022-22950
CVSS 3 Score Details (6.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: https://tanzu.vmware.com/security/cve-2022-22950
Release Date: 2022-04-01
Fix Resolution: 5.2.20.RELEASE
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2026-41851
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded cache growth.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
Publish Date: 2026-06-09
URL: CVE-2026-41851
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2026-06-09
Fix Resolution: https://github.com/spring-projects/spring-framework.git - v6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,org.springframework:spring-expression:7.0.8,org.springframework:spring-expression:6.2.19
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2024-38808
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.
Specifically, an application is vulnerable when the following is true:
- The application evaluates user-supplied SpEL expressions.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: 2024-08-20
URL: CVE-2024-38808
CVSS 3 Score Details (4.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2024-38808
Release Date: 2024-08-20
Fix Resolution: 5.3.39
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2026-41852
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
- ❌ spring-expression-5.1.1.RELEASE.jar (Vulnerable Library)
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
Publish Date: 2026-06-09
URL: CVE-2026-41852
CVSS 3 Score Details (3.7)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2026-41852
Release Date: 2026-06-09
Fix Resolution: org.springframework:spring-expression:6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,org.springframework:spring-expression:7.0.8,https://github.com/spring-projects/spring-framework.git - v6.2.19
⛑️ Automatic Remediation will be attempted for this issue.
⛑️Automatic Remediation will be attempted for this issue.
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Vulnerabilities
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
Publish Date: 2026-08-27
URL: CVE-2026-59283
CVSS 3 Score Details (9.1)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2026-08-27
Fix Resolution: https://github.com/spring-projects/spring-framework.git - v7.0.9,org.springframework:spring-expression:7.0.9
⛑️ Automatic Remediation will be attempted for this issue.
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) is used with a BigDecimal or BigInteger operand and a large exponent value.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.25.RELEASE and earlier
Publish Date: 2026-08-27
URL: CVE-2026-47886
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2026-47886
Release Date: 2026-08-27
Fix Resolution: org.springframework:spring-expression:7.0.9
⛑️ Automatic Remediation will be attempted for this issue.
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). By providing a specially crafted expression, an attacker can trigger excessive resource consumption during evaluation, leading to application degradation or unavailability.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
Publish Date: 2026-06-09
URL: CVE-2026-41850
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2026-41850
Release Date: 2026-06-09
Fix Resolution: org.springframework:spring-expression:6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,https://github.com/spring-projects/spring-framework.git - v6.2.19,org.springframework:spring-expression:7.0.8
⛑️ Automatic Remediation will be attempted for this issue.
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers excessive resource consumption, resulting in a Denial of Service (DoS).
Affected versions:
Spring Framework 5.3.0 through 5.3.48.
Publish Date: 2026-06-09
URL: CVE-2026-41849
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
Publish Date: 2023-04-13
URL: CVE-2023-20863
CVSS 3 Score Details (6.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2023-20863
Release Date: 2023-04-13
Fix Resolution: 5.2.24.RELEASE
⛑️ Automatic Remediation will be attempted for this issue.
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
Publish Date: 2023-03-23
URL: CVE-2023-20861
CVSS 3 Score Details (6.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2023-20861
Release Date: 2023-03-23
Fix Resolution: 5.2.23.RELEASE
⛑️ Automatic Remediation will be attempted for this issue.
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.
Publish Date: 2022-04-01
URL: CVE-2022-22950
CVSS 3 Score Details (6.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://tanzu.vmware.com/security/cve-2022-22950
Release Date: 2022-04-01
Fix Resolution: 5.2.20.RELEASE
⛑️ Automatic Remediation will be attempted for this issue.
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded cache growth.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
Publish Date: 2026-06-09
URL: CVE-2026-41851
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2026-06-09
Fix Resolution: https://github.com/spring-projects/spring-framework.git - v6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,org.springframework:spring-expression:7.0.8,org.springframework:spring-expression:6.2.19
⛑️ Automatic Remediation will be attempted for this issue.
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.
Specifically, an application is vulnerable when the following is true:
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: 2024-08-20
URL: CVE-2024-38808
CVSS 3 Score Details (4.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2024-38808
Release Date: 2024-08-20
Fix Resolution: 5.3.39
⛑️ Automatic Remediation will be attempted for this issue.
Vulnerable Library - spring-expression-5.1.1.RELEASE.jar
Spring Expression Language (SpEL)
Library home page: https://github.com/spring-projects/spring-framework
Sample Path to Dependency File: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/spring-expression/5.1.1.RELEASE/spring-expression-5.1.1.RELEASE.jar,/target/owaspSecurityShepherd/WEB-INF/lib/spring-expression-5.1.1.RELEASE.jar
Dependency Hierarchy:
Found in HEAD commit: d036c7c5d23c484d9f8c12b1cc9fbbb1b20e6338
Found in base branch: dev
Vulnerability Details
A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic.
Affected versions:
Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.
Publish Date: 2026-06-09
URL: CVE-2026-41852
CVSS 3 Score Details (3.7)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: https://spring.io/security/cve-2026-41852
Release Date: 2026-06-09
Fix Resolution: org.springframework:spring-expression:6.2.19,https://github.com/spring-projects/spring-framework.git - v7.0.8,org.springframework:spring-expression:7.0.8,https://github.com/spring-projects/spring-framework.git - v6.2.19
⛑️ Automatic Remediation will be attempted for this issue.
⛑️Automatic Remediation will be attempted for this issue.