## cve-2026-59283 - MEDIUM - Spring Framework Safety Guard Bypass via SpEL Expression Compilation

- 種別: advisory
- 関連技術: spring, java
- CVE: CVE-2026-59283
- 公開日時: 2026-08-20T00:00:00.000Z
- 情報源: Spring Security Advisories (https://spring.io/security/cve-2026-59283)
- パーマリンク: https://vulnpulse.app/items/spring-security-098080f4161f

Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Specifically, an application is vulnerable when all of the following conditions are met: The application evaluates SpEL expressions using SimpleEvaluationContext . The SpEL expression compiler is active, either because the spring.expression.compiler.mode system property or Spring property has been set to IMMEDIATE or MIXED , or because a SpelParserConfiguration with SpelCompilerMode set to IMMEDIATE or MI…