medium4.8
CVE-2026-41847
Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.
Impact
Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.springframework:spring-webflux | <= 5.3.39 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Spring Framework | from 5.3.0 before 5.3.49 |