<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: spring-security</title><description>Every new CVE for spring-security.</description><link>https://agentprime.io/</link><item><title>CVE-2026-59277: Spring Security InetAddressMatchers Incomplete Internal Network Classification</title><link>https://agentprime.io/advisories/CVE-2026-59277/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59277/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 17:57:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59276: Timing Attack via Non-Constant-Time Comparison of Sensitive Values</title><link>https://agentprime.io/advisories/CVE-2026-59276/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59276/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 17:57:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59270: Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces</title><link>https://agentprime.io/advisories/CVE-2026-59270/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59270/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:20:33 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-47877: Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)</title><link>https://agentprime.io/advisories/CVE-2026-47877/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47877/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 05:20:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47842: Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation</title><link>https://agentprime.io/advisories/CVE-2026-47842/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47842/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 19:22:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47841: WebAuthn User Verification Bypass via Session Serialization</title><link>https://agentprime.io/advisories/CVE-2026-47841/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47841/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 17:08:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41707: Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay</title><link>https://agentprime.io/advisories/CVE-2026-41707/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41707/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Aug 2026 22:34:30 GMT</pubDate><category>CVE</category></item></channel></rss>