VulnSea

Spring has 2 CVEs on record. The median CVSS is 7.5 (high).

CVEs per month

Last 12 months, by publish date

101112010203040506070809
Exploited share
0% vs 1% corpus
Median CVSS
7.5
Publish → KEV
—
Last 90 days
0 prev 2

Weakness classes

Products

  • Micrometer 1
  • micrometer-core 1
Follow Spring:RSS feedSave a search →Embed badge ↗
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

Spring vulnerabilities

CVEs affecting Spring, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-40984High· 7.5
3mo ago

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.1…

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.1…

▾ TwilightSpring · micrometer-coreEPSS 0.79%via NVD
CVE-2026-40983High· 7.5
3mo ago

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

▾ TwilightSpring · MicrometerEPSS 0.63%via NVD
Spring vulnerabilities (CVEs) · VulnSea