CVSS 9.8 (critical) · published 2026-08-27
Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19
Affected products (NVD): vmware spring_framework
Fixed in (NVD): 6.2.20, 7.0.8.1
Weakness: CWE-93
Source: NVD CVE-2026-47890
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.