Threats Tagged 'ghsa-j9f9-w8pj-32f8'

CVE-2026-47890 is a critical vulnerability in the Spring Framework affecting versions 6.2.0 through 6.2.19 and 7.0.0 through 7.0.8. It involves improper neutralization of CRLF sequences (CRLF Injection) that can cause stream corruption when using Server-Sent Events (SSE) with view fragments in Spring MVC and WebFlux applications. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.