CVE-2026-47888

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring Framework versions 5.2.0.RELEASE through 5.2.25.RELEASE

Description A Spring RSocket application is susceptible to a memory leak. This occurs when the application processes a malformed SETUP frame, which is a control frame used to negotiate connection parameters in the RSocket protocol.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.