AIKIDO-2026-10571
spring-core is vulnerable to Unlimited Resource Consumption
60
Medium Risk
This Affects:
spring-coreTL;DR
Affected versions of this package are vulnerable to uncontrolled resource consumption in Spring MVC and WebFlux static resource handling on Windows platforms. When serving static resources from the file system, attackers can send crafted requests that are slow to resolve and keep HTTP connections occupied, leading to denial of service.
Who does this affect?
You are affected if using a vulnerable version.
Background info
spring-core is vulnerable to Unlimited Resource Consumption in versions 1.0.0 - 5.3.47, 6.0.0 - 6.1.26, 6.2.0 - 6.2.17 and 7.0.0 - 7.0.6.
How to fix this
Upgrade the org.springframework:spring-core library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant