🔐 CVE Alert

CVE-2026-59283

UNKNOWN 0.0

Spring Framework Safety Guard Bypass via SpEL Expression Compilation

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.25.RELEASE and earlier

Vendor spring
Product spring framework
Ecosystems
Industries
TechnologyEnterprise
Published Aug 27, 2026
Stay Ahead of the Next One

Get instant alerts for spring spring framework

Be the first to know when new unknown vulnerabilities affecting spring spring framework are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Spring / Spring Framework
7.0.0 ≤ 7.0.8 6.2.0 ≤ 6.2.19 6.1.0 ≤ 6.1.28 6.0.0 ≤ 6.0.30 5.3.0 ≤ 5.3.49 0 ≤ 5.2.25.RELEASE

References

NVD ↗ CVE.org ↗ EPSS Data ↗
spring.io: https://spring.io/security/cve-2026-59283