Spring Security Spring Authorization Server

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-227527.0.0 – 7.0.4 ; 1.5.0 – 1.5.6 ; 1.4.0 – 1.4.9 ; …Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadataCRITICAL 9.60.5 %