{"api_version":"v1","generated_at":"2026-10-06T04:35:00+00:00","product":{"cve_count":28,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-spring-spring-security-a2c53fb661b8","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/spring-security","name":"spring security","next_cursor":null,"observations":[{"affected":"7.1.0","affected_versions_present":true,"cve_id":"CVE-2026-59277","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59277","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-28T14:01:04.295Z","patch_url":"","primary_source":"","published":"2026-08-27T17:57:36.006Z"},{"affected":"7.1.0; 7.0.0 \u2264 7.0.6; 6.5.0 \u2264 6.5.11; 6.4.0 \u2264 6.4.18; 5.8.0 \u2264 5.8.27; 5.7.0 \u2264 5.7.25","affected_versions_present":true,"cve_id":"CVE-2026-59276","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59276","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-28T14:00:41.248Z","patch_url":"","primary_source":"","published":"2026-08-27T17:57:34.993Z"},{"affected":"7.1.0; 7.0.0 \u2264 7.0.6; 6.5.0 \u2264 6.5.11; 6.4.0 \u2264 6.4.18; 5.8.0 \u2264 5.8.27; 5.7.0 \u2264 5.7.25","affected_versions_present":true,"cve_id":"CVE-2026-59270","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59270","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-28T16:52:28.234Z","patch_url":"","primary_source":"","published":"2026-08-27T05:20:33.210Z"},{"affected":"7.1.0; 7.0.0 \u2264 7.0.6","affected_versions_present":true,"cve_id":"CVE-2026-47877","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47877","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T14:43:11.105Z","patch_url":"","primary_source":"","published":"2026-08-27T05:20:22.523Z"},{"affected":"7.1.0; 7.0.0 \u2264 7.0.6; 6.5.0 \u2264 6.5.11; 6.4.0 \u2264 6.4.18; 5.8.0 \u2264 5.8.27; 5.7.0 \u2264 5.7.25","affected_versions_present":true,"cve_id":"CVE-2026-47842","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47842","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-26T19:45:25.424Z","patch_url":"","primary_source":"","published":"2026-08-26T19:22:23.745Z"},{"affected":"7.1.0; 7.0.0 \u2264 7.0.6; 6.5.0 \u2264 6.5.11; 6.4.0 \u2264 6.4.18","affected_versions_present":true,"cve_id":"CVE-2026-47841","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47841","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T03:58:22.127Z","patch_url":"","primary_source":"","published":"2026-08-26T17:08:52.788Z"},{"affected":"Spring Security: 7.1.0, 7.0.0 \u2264 7.0.6, 6.5.0 \u2264 6.5.11","affected_versions_present":true,"cve_id":"CVE-2026-41707","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41707","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-27T03:57:13.462Z","patch_url":"","primary_source":"","published":"2026-08-25T22:34:30.570Z"},{"affected":"5.7.0 < 5.7.25; 5.8.0 < 5.8.27; 6.3.0 < 6.3.18; 6.4.0 < 6.4.18; 6.5.0 < 6.5.10.2","affected_versions_present":true,"cve_id":"CVE-2026-47838","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-47838","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-30T21:49:56.180Z","patch_url":"","primary_source":"","published":"2026-06-09T23:50:07.988Z"},{"affected":"5.7.0 < 5.7.24; 5.8.0 < 5.8.26; 6.3.0 < 6.3.17; 6.4.0 < 6.4.17; 6.5.0 < 6.5.10.2; 7.0.0 < 7.0.5.1","affected_versions_present":true,"cve_id":"CVE-2026-41706","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41706","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-27T21:27:02.537Z","patch_url":"","primary_source":"","published":"2026-06-09T23:47:58.903Z"},{"affected":"5.7.0 < 5.7.24; 5.8.0 < 5.8.26; 6.3.0 < 6.3.17; 6.4.0 < 6.4.17; 6.5.0 < 6.5.10.2; 7.0.0 < 7.0.5.1","affected_versions_present":true,"cve_id":"CVE-2026-41694","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41694","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-27T21:25:20.803Z","patch_url":"","primary_source":"","published":"2026-06-09T23:47:17.784Z"},{"affected":"7.0.0 < 7.0.5.1; 1.5.0 < 1.5.7.1","affected_versions_present":true,"cve_id":"CVE-2026-41008","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41008","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-27T21:30:17.016Z","patch_url":"","primary_source":"","published":"2026-06-09T23:47:07.292Z"},{"affected":"5.7.0 < 5.7.24; 5.8.0 < 5.8.26; 6.3.0 < 6.3.17; 6.4.0 < 6.4.17; 6.5.0 < 6.5.10.2; 7.0.0 < 7.0.5.1","affected_versions_present":true,"cve_id":"CVE-2026-41003","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41003","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-27T21:24:40.807Z","patch_url":"","primary_source":"","published":"2026-06-09T23:46:53.683Z"},{"affected":"7.0.0 < 7.0.5.1","affected_versions_present":true,"cve_id":"CVE-2026-40993","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40993","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-27T21:23:25.462Z","patch_url":"","primary_source":"","published":"2026-06-09T23:46:39.702Z"},{"affected":"5.7.0 < 5.7.24; 5.8.0 < 5.8.26; 6.3.0 < 6.3.17; 6.4.0 < 6.4.17; 6.5.0 < 6.5.10.2; 7.0.0 < 7.0.5.1","affected_versions_present":true,"cve_id":"CVE-2026-40988","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-40988","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-27T21:22:39.249Z","patch_url":"","primary_source":"","published":"2026-06-09T23:46:15.589Z"},{"affected":"7.0.0 \u2264 7.0.4","affected_versions_present":true,"cve_id":"CVE-2026-22754","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22754","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T01:19:27.274Z","patch_url":"https://spring.io/security/cve-2026-22754","primary_source":"","published":"2026-04-22T05:32:48.172Z"},{"affected":"7.0.0 \u2264 7.0.4","affected_versions_present":true,"cve_id":"CVE-2026-22753","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22753","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-22T15:59:59.319Z","patch_url":"https://spring.io/security/cve-2026-22753","primary_source":"","published":"2026-04-22T05:20:31.083Z"},{"affected":"6.3.0 \u2264 6.3.14; 6.4.0 \u2264 6.4.14; 6.5.0 \u2264 6.5.9; 7.0.0 \u2264 7.0.4","affected_versions_present":true,"cve_id":"CVE-2026-22748","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22748","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-22T16:00:09.573Z","patch_url":"","primary_source":"","published":"2026-04-22T05:15:03.505Z"},{"affected":"7.0.0 \u2264 7.0.4","affected_versions_present":true,"cve_id":"CVE-2026-22747","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22747","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-15T01:19:29.723Z","patch_url":"","primary_source":"","published":"2026-04-22T05:08:41.318Z"},{"affected":"5.7.0 \u2264 5.7.22; 5.8.0 \u2264 5.8.24; 6.3.0 \u2264 6.3.15; 6.4.0 \u2264 6.4.15; 6.5.0 \u2264 6.5.9; 7.0.0 \u2264 7.0.4","affected_versions_present":true,"cve_id":"CVE-2026-22746","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22746","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-22T13:36:42.801Z","patch_url":"","primary_source":"","published":"2026-04-22T05:02:24.327Z"},{"affected":"6.4.0 \u2264 6.4.15; 6.5.0 \u2264 6.5.9; 7.0.0 \u2264 7.0.4","affected_versions_present":true,"cve_id":"CVE-2026-22751","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22751","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-21T18:44:34.841Z","patch_url":"","primary_source":"","published":"2026-04-21T18:30:35.428Z"},{"affected":"4.0.0 \u2264 4.0.3; 3.5.0 \u2264 3.5.11; 3.4.0 \u2264 3.4.14; 3.3.0 \u2264 3.3.17; 2.7.0 \u2264 2.7.31","affected_versions_present":true,"cve_id":"CVE-2026-22733","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-22733","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-20T14:45:18.731Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-259","primary_source":"","published":"2026-03-19T23:29:10.098Z"},{"affected":"5.7.16; 5.8.18; 6.0.16; 6.1.14; 6.2.10; 6.3.8; 6.4.4","affected_versions_present":true,"cve_id":"CVE-2025-22234","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-22234","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-22T21:27:13.558Z","patch_url":"","primary_source":"","published":"2026-01-22T21:02:23.992Z"},{"affected":"6.4.x < 6.4.6","affected_versions_present":true,"cve_id":"CVE-2025-41232","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-41232","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T18:28:04.260Z","patch_url":"","primary_source":"","published":"2025-05-21T10:23:07.078Z"},{"affected":"6.4.0-6.4.3","affected_versions_present":true,"cve_id":"CVE-2025-22223","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-22223","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-24T18:06:24.575Z","patch_url":"","primary_source":"","published":"2025-03-24T17:42:49.634Z"},{"affected":"5.7.x < 5.7.16; 5.8.x < 5.8.18; 6.0.x < 6.0.16; 6.1.x < 6.1.14; 6.2.x < 6.2.10; 6.3.x < 6.3.8; 6.4.x < 6.4.4","affected_versions_present":true,"cve_id":"CVE-2025-22228","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-22228","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T19:09:20.934Z","patch_url":"","primary_source":"","published":"2025-03-20T05:49:19.275Z"},{"affected":"6.3.x < 6.3.2","affected_versions_present":true,"cve_id":"CVE-2024-38810","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-38810","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-20T13:34:50.068Z","patch_url":"","primary_source":"","published":"2024-08-20T03:35:24.795Z"},{"affected":"6.1.x < 6.1.7; 6.2.x < 6.2.2","affected_versions_present":true,"cve_id":"CVE-2024-22234","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-22234","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-13T17:33:37.468Z","patch_url":"","primary_source":"","published":"2024-02-20T07:02:50.873Z"},{"affected":"4.2 < 4.2.13.RELEASE","affected_versions_present":true,"cve_id":"CVE-2019-11272","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-11272","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T19:25:59.208Z","patch_url":"","primary_source":"","published":"2019-06-26T14:06:15.312Z"},{"affected":"5.0 < 5.0.11.RELEASE; 5.1 < 5.1.4.RELEASE; 4.2 < 4.2.11.RELEASE","affected_versions_present":true,"cve_id":"CVE-2019-3795","cve_url":"https://cve.blacktree.nl/cve/CVE-2019-3795","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T00:02:03.823Z","patch_url":"","primary_source":"","published":"2019-04-09T15:29:02.127Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"spring"}}