<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: spring-framework</title><description>Every new CVE for spring-framework.</description><link>https://agentprime.io/</link><item><title>CVE-2026-59314: Spring Framework response splitting in ContentDisposition</title><link>https://agentprime.io/advisories/CVE-2026-59314/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59314/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 18:04:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59313: Server Sent Event stream corruption in Spring MVC functional web framework</title><link>https://agentprime.io/advisories/CVE-2026-59313/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59313/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 17:58:03 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-59283: Spring Framework Safety Guard Bypass via SpEL Expression Compilation</title><link>https://agentprime.io/advisories/CVE-2026-59283/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59283/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 17:57:40 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-59282: Spring Framework Denial of Service via Unbounded List Growth in Data Binding</title><link>https://agentprime.io/advisories/CVE-2026-59282/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59282/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 17:57:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59281: Spring Framework Cross-site Scripting via EscapedErrors</title><link>https://agentprime.io/advisories/CVE-2026-59281/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59281/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 17:57:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59280: Spring Framework Path Traversal via Backslash in SpringTemplateLoader</title><link>https://agentprime.io/advisories/CVE-2026-59280/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59280/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 16:41:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47893: Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService</title><link>https://agentprime.io/advisories/CVE-2026-47893/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47893/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:21:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47891: Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder</title><link>https://agentprime.io/advisories/CVE-2026-47891/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47891/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:21:39 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-47889: Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse</title><link>https://agentprime.io/advisories/CVE-2026-47889/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47889/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:21:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47888: Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler</title><link>https://agentprime.io/advisories/CVE-2026-47888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47888/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:21:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47887: Spring Framework Open Redirect in UrlFileNameViewController</title><link>https://agentprime.io/advisories/CVE-2026-47887/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47887/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:21:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47886: Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions</title><link>https://agentprime.io/advisories/CVE-2026-47886/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47886/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:21:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47885: Spring Framework maxPartSize Ignored in PartEventHttpMessageReader</title><link>https://agentprime.io/advisories/CVE-2026-47885/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47885/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:21:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47883: Spring Framework Open Redirect in UrlHandlerFilter</title><link>https://agentprime.io/advisories/CVE-2026-47883/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47883/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:21:32 GMT</pubDate><category>CVE</category></item></channel></rss>