NetSight
IP …
high7.5

CVE-2026-40988

An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by w…

Impact

An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates the compressed SAML payload into memory. Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.springframework.security:spring-security-saml2-service-provider>= 7.0.0, <= 7.0.57.0.6

Affected products

VendorProductAffected versions
VmwareSpring Security
from 5.7.0 before 5.7.24
from 5.8.0 before 5.8.26
from 6.3.0 before 6.3.17
from 6.4.0 before 6.4.17
from 6.5.0 before 6.5.10.2
from 7.0.0 before 7.0.5.1

Weakness classification

CWE-400

References