Threats Tagged 'ghsa-rxw8-5hfh-3jfv'

CVE-2026-47888 is a high severity vulnerability in the Spring Framework that causes a memory leak when a malformed SETUP frame is processed by a Spring RSocket application. It affects multiple versions of the Spring Framework from 5.2.0.RELEASE through 7.0.8. The vulnerability is classified as CWE-401, indicating missing release of memory after its effective lifetime. There is no vendor advisory or patch information available at this time.