Threats Tagged 'ghsa-7p67-m4j8-h4vx'

1 threat

Threats Tagged 'ghsa-7p67-m4j8-h4vx'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-47891Spring Framework · Allocation of Resources Without Limits or Throttling Critical9.8EPSS 0.5%2026-08-27CVE Database V5CVE-2026-47891 CVE-2026-47891 is a critical vulnerability in the Spring Framework affecting multiple versions from 5.2.25.RELEASE and earlier through 7.0.8. It involves the Spring WebFlux application using the Aalto XML processor, which fails to properly enforce the maxInMemorySize limit. This can lead to uncontrolled resource allocation during XML parsing, potentially causing denial of service or other impacts. EPSS 0.5%Vulnerability Spring #cwe-770 #ghsa-7p67-m4j8-h4vx	CVE Database V5	2026-08-27

Showing 1–1 of 1 result