CVE-2026-59313

Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49

Description Spring MVC applications utilizing the functional web framework are susceptible to stream corruption when implementing Server-Sent Events (SSE), a mechanism that allows servers to push real-time updates to web pages over a single HTTP connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.