https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T19:49:59.250338+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-41854 CVE-2026-41854 — Spring Framework Server-Side Request Forgery via UriComponentsBuilder 2026-10-02T19:49:59.260808+00:00

Affected: Spring Framework

Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack.

Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18.