org.springframework:spring-webflux vulnerabilities
CVEs whose affected-version data names the org.springframework:spring-webflux package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-47892Critical· 9.8Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints
Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints
▾ Midnightspringframework · org.springframework:spring-webfluxEPSS 0.53%via GHSA
CVE-2026-47890Critical· 9.8Spring Framework Server Sent Event stream corruption while rendering fragments
Spring Framework Server Sent Event stream corruption while rendering fragments
▾ Midnightspringframework · org.springframework:spring-webfluxEPSS 0.56%via GHSA
CVE-2024-38819High· 7.5PoCSpring Framework Path Traversal vulnerability
Spring Framework Path Traversal vulnerability
▾ Midnightspringframework · org.springframework:spring-webfluxEPSS 56%via GHSA