๐Ÿ” CVE Alert

CVE-2026-59313

UNKNOWN 0.0

Server Sent Event stream corruption in Spring MVC functional web framework

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49

Vendor spring
Product spring framework
Ecosystems
Industries
TechnologyEnterprise
Published Aug 27, 2026
Stay Ahead of the Next One

Get instant alerts for spring spring framework

Be the first to know when new unknown vulnerabilities affecting spring spring framework are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Spring / Spring Framework
7.0.0 โ‰ค 7.0.8 6.2.0 โ‰ค 6.2.19 6.1.0 โ‰ค 6.1.28 6.0.0 โ‰ค 6.0.30 5.3.0 โ‰ค 5.3.49

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
spring.io: https://spring.io/security/cve-2026-59313