~ / search / GHSA-vqgp-pf68-6947

GHSA-vqgp-pf68-6947

Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-41847

Packages

EcosystemPackageAffectedFixed in
Maven org.springframework:spring-webflux <= 5.3.39 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48.

References

External links from the advisory. They lead to third-party sites.