CVE-2026-41842

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.7 Spring Framework versions 6.2.0 through 6.2.18 Spring Framework versions 6.1.0 through 6.1.27 Spring Framework versions 5.3.0 through 5.3.48

Description Spring MVC and WebFlux applications are susceptible to Denial of Service (DoS) attacks, which occur when the system is overwhelmed with requests, making it unavailable to legitimate users, during the resolution of static resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.