Spring Boot Web 4.0.0-M1 to M3: Spring Security Bypass Leading to Unauthorized Access
Security Advisory
High
Spring
Affected:
- org.springframework.boot:spring-boot-starter-web 4.0.0-M1
- org.springframework.boot:spring-boot-starter-web 4.0.0-M2
- org.springframework.boot:spring-boot-starter-web 4.0.0-M3
Fixed in:
- 4.0.0-M4
Referenced CVEs:
CVE-2026-111146 · 6.1
CVE-2026-111145 · 6.1
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.