← CVE Intelligence

CVE-2026-59313

Server Sent Event stream corruption in Spring MVC functional web framework PUBLISHED

Description (CNA)

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49

Affected (CNA)

Vendor / productVersions
Spring / Spring Frameworkaffected 7.0.0 through 7.0.8; affected 6.2.0 through 6.2.19; affected 6.1.0 through 6.1.28; affected 6.0.0 through 6.0.30; affected 5.3.0 through 5.3.49

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.