Vendor
spring
Public exploit23Avg CVSS6.3
CVEs in the catalog
167
since 2019-01
Months in the top 100
9
months with a stored rank
Best rank
#9
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| spring framework | 30 | 18% |
| spring security | 22 | 13% |
| spring boot | 15 | 9% |
| spring ai | 14 | 8% |
| red hat jboss enterprise application platform expansion pack | 9 | 5% |
| spring for graphql | 9 | 5% |
| spring web services | 8 | 5% |
| red hat fuse 7 | 7 | 4% |
| spring cloud config | 6 | 4% |
| spring tools for eclipse | 6 | 4% |
| red hat build of apache camel hawtio 4 | 5 | 3% |
| red hat openshift dev spaces | 5 | 3% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-770 | 13 | 8% |
| CWE-400 | 11 | 7% |
| CWE-502 | 9 | 5% |
| CWE-22 | 8 | 5% |
| CWE-601 | 8 | 5% |
| CWE-284 | 7 | 4% |
| CWE-287 | 7 | 4% |
| CWE-295 | 6 | 4% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | CVSS | Published |
|---|---|---|---|
| CVE-2026-59314 | CWE-113 | 3.7 | 2026-08-27 |
| CVE-2026-59307 | CWE-502 | 8 | 2026-08-27 |
| CVE-2026-59298 | CWE-20 | 3.1 | 2026-08-27 |
| CVE-2026-59289 | CWE-770 | 7.5 | 2026-08-27 |
| CVE-2026-59288 | CWE-200 | 7.5 | 2026-08-27 |
| CVE-2026-59287 | CWE-770 | 5.9 | 2026-08-27 |
| CVE-2026-59286 | CWE-494 | 8.1 | 2026-08-27 |
| CVE-2026-59285 | CWE-502 | 8.1 | 2026-08-27 |
| CVE-2026-59318 | CWE-863 | 6.5 | 2026-08-21 |
| CVE-2026-59308 | CWE-668 | 4.2 | 2026-08-21 |
| CVE-2026-59279 | CWE-770 | 7.5 | 2026-08-21 |
| CVE-2026-59326 | CWE-532 | 3.3 | 2026-07-30 |
| CVE-2026-59328 | CWE-79 | 4.2 | 2026-07-30 |
| CVE-2026-59327 | CWE-312 | 4.4 | 2026-07-30 |
| CVE-2026-47882 | CWE-338 | 8.3 | 2026-07-30 |