CVE-2026-22745

Name of the Vulnerable Software and Affected Versions Spring MVC (affected versions not specified) Spring WebFlux (affected versions not specified)

Description Applications using Spring MVC or Spring WebFlux are susceptible to Denial of Service attacks when serving static resources from the file system on Windows platforms. An attacker can send malicious requests that are slow to resolve, causing HTTP connections to remain occupied and leading to a service outage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.