172 CVEs
2 in CISA KEV
Spring Vulnerabilities
CVE security advisories and vulnerability history for Spring.
172
Total CVEs
Published
2
In CISA KEV
Exploited in the wild
12
Public exploits
PoC or exploit code
7.0
Avg CVSS
2018–2026
Overview
Spring has 172 published CVE records since 2018, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Spring products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.