7 Total advisories
7 Vulnerabilities
0 Malware
Dependency scanning
Check whether org.springframework.security:spring-security-web is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
MEDIUM 6.8
CVE-2026-47838
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
MEDIUM 6.1
CVE-2026-41706
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache
MEDIUM 6.8
CVE-2026-22747
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates
CRITICAL 9.1
CVE-2026-22732
Spring Security HTTP Headers Are not Written Under Some Conditions
CRITICAL 9.1
CVE-2024-38821
Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications
CRITICAL 9.8
CVE-2022-22978
Authorization bypass in Spring Security
HIGH 8.8
CVE-2021-22112
Privilege escalation in spring security
Browse more Maven advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes