https://isitpatched.com/spring-security Security alerts for Spring Security: newly-exploited CVEs and end-of-life events from IsItPatched. en Compiled by IsItPatched (isitpatched.com) from NVD, CISA KEV, EPSS and endoflife.date. IsItPatched (https://isitpatched.com) https://www.rssboard.org/rss-specification 15 https://isitpatched.com/icon-192.png https://isitpatched.com/spring-security Tue, 16 Jun 2026 22:43:52 GMT https://isitpatched.com/cve/CVE-2024-22234 spring-security|CVE-2024-22234 Severity: High (CVSS 7.4) · Improper access control · EPSS 1% High IsItPatched Tue, 20 Feb 2024 07:15:09 GMT https://isitpatched.com/cve/CVE-2023-34034 spring-security|CVE-2023-34034 Severity: Critical (CVSS 9.1) · CWE-281 · EPSS 3% Critical IsItPatched Wed, 19 Jul 2023 15:15:11 GMT https://isitpatched.com/cve/CVE-2023-34035 spring-security|CVE-2023-34035 Severity: High (CVSS 7.3) · Incorrect authorization · EPSS 1% High IsItPatched Tue, 18 Jul 2023 16:15:11 GMT https://isitpatched.com/cve/CVE-2023-20862 spring-security|CVE-2023-20862 Severity: Medium (CVSS 6.3) · CWE-459 · EPSS 1% Medium IsItPatched Wed, 19 Apr 2023 20:15:10 GMT https://isitpatched.com/cve/CVE-2022-31692 spring-security|CVE-2022-31692 Severity: Critical (CVSS 9.8) · Authorization bypass · EPSS 3% Critical IsItPatched Mon, 31 Oct 2022 20:15:12 GMT https://isitpatched.com/cve/CVE-2022-31690 spring-security|CVE-2022-31690 Severity: High (CVSS 8.1) · EPSS 1% High IsItPatched Mon, 31 Oct 2022 20:15:12 GMT https://isitpatched.com/cve/CVE-2022-22978 spring-security|CVE-2022-22978 Severity: Critical (CVSS 9.8) · Incorrect authorization · EPSS 10% Critical IsItPatched Thu, 19 May 2022 15:15:08 GMT https://isitpatched.com/cve/CVE-2022-22976 spring-security|CVE-2022-22976 Severity: Medium (CVSS 5.3) · Integer overflow · EPSS 2% Medium IsItPatched Thu, 19 May 2022 15:15:08 GMT https://isitpatched.com/cve/CVE-2021-22119 spring-security|CVE-2021-22119 Severity: High (CVSS 7.5) · Uncontrolled resource consumption · EPSS 7% High IsItPatched Tue, 29 Jun 2021 17:15:08 GMT https://isitpatched.com/cve/CVE-2021-22112 spring-security|CVE-2021-22112 Severity: High (CVSS 8.8) · EPSS 3% High IsItPatched Tue, 23 Feb 2021 19:15:13 GMT https://isitpatched.com/cve/CVE-2020-5408 spring-security|CVE-2020-5408 Severity: Medium (CVSS 6.5) · CWE-329 · EPSS 2% Medium IsItPatched Thu, 14 May 2020 18:15:12 GMT https://isitpatched.com/cve/CVE-2019-11272 spring-security|CVE-2019-11272 Severity: High (CVSS 7.3) · Improper authentication · EPSS 1% High IsItPatched Wed, 26 Jun 2019 14:15:09 GMT https://isitpatched.com/cve/CVE-2019-3795 spring-security|CVE-2019-3795 Severity: Medium (CVSS 5.3) · CWE-330 · EPSS 2% Medium IsItPatched Tue, 09 Apr 2019 16:29:01 GMT https://isitpatched.com/cve/CVE-2018-1199 spring-security|CVE-2018-1199 Severity: Medium (CVSS 5.3) · Improper input validation · EPSS 3% Medium IsItPatched Fri, 16 Mar 2018 20:29:00 GMT https://isitpatched.com/cve/CVE-2017-4995 spring-security|CVE-2017-4995 Severity: High (CVSS 8.1) · Insecure deserialization · EPSS 3% High IsItPatched Mon, 27 Nov 2017 10:29:00 GMT https://isitpatched.com/cve/CVE-2016-5007 spring-security|CVE-2016-5007 Severity: High (CVSS 7.5) · CWE-264 · EPSS 2% High IsItPatched Thu, 25 May 2017 17:29:00 GMT https://isitpatched.com/cve/CVE-2014-3527 spring-security|CVE-2014-3527 Severity: Critical (CVSS 9.8) · Improper authentication · EPSS 2% Critical IsItPatched Thu, 25 May 2017 17:29:00 GMT https://isitpatched.com/cve/CVE-2014-0097 spring-security|CVE-2014-0097 Severity: High (CVSS 7.3) · Improper authentication · EPSS 1% High IsItPatched Thu, 25 May 2017 17:29:00 GMT https://isitpatched.com/cve/CVE-2016-9879 spring-security|CVE-2016-9879 Severity: High (CVSS 7.5) · CWE-417 · EPSS 1% High IsItPatched Fri, 06 Jan 2017 22:59:00 GMT https://isitpatched.com/cve/CVE-2011-2894 spring-security|CVE-2011-2894 Severity: Medium (CVSS 6.8) · Insecure deserialization · EPSS 9% Medium IsItPatched Tue, 04 Oct 2011 10:55:09 GMT