Threats affecting pkg:maven/org.springframework/spring-websocket

Spring Framework versions 5.3.0 through 5.3.48, 6.1.0 through 6.1.27, 6.2.0 through 6.2.18, and 7.0.0 through 7.0.7 have a vulnerability where WebSocket session IDs are not cryptographically unpredictable. This weakness could potentially be exploited if combined with inadequate authorization controls. The vulnerability is identified as CWE-330 and has a medium severity with a CVSS score of 4.8.