org.springframework:spring-webmvc vulnerabilities
CVEs whose affected-version data names the org.springframework:spring-webmvc package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-47890Critical· 9.8Spring Framework Server Sent Event stream corruption while rendering fragments
Spring Framework Server Sent Event stream corruption while rendering fragments
▾ Midnightspringframework · org.springframework:spring-webfluxEPSS 0.56%via GHSA
CVE-2024-38819High· 7.5PoCSpring Framework Path Traversal vulnerability
Spring Framework Path Traversal vulnerability
▾ Midnightspringframework · org.springframework:spring-webfluxEPSS 56%via GHSA