7 Critical Vulnerabilities Threaten Spring Security 7.0

The report summarizes seven vulnerabilities in Spring Security (notably CVE-2026-22752 with CVSS 9.6) affecting recent releases—especially Spring Security 7.0—and describes issues including XSS, SSRF, authorization bypasses, X.509 impersonation, timing-attack user enumeration, a one-time token race, and JWT misconfiguration; users are urged to upgrade to fixed versions (7.0.5, 6.5.10, 6.4.16) or apply temporary workarounds for path-matching issues.