cve-2026-59283 - MEDIUM - Spring Framework Safety Guard Bypass via SpEL Expression Compilation

Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. Specifically, an application is vulnerable when all of the following conditions are met: The application evaluates SpEL expressions using SimpleEvaluationContext . The SpEL expression compiler is active, either because the spring.expression.compiler.mode system property or Spring property has been set to IMMEDIATE or MIXED , or because a SpelParserConfiguration with SpelCompilerMode set to IMMEDIATE or MI…

在 Spring Security Advisories 阅读

2026/08/20 09:00，Spring Security Advisories 发布了“cve-2026-59283 - MEDIUM - Spring Framework Safety Guard Bypass via SpEL Expression Compilation”（类型：漏洞公告）。相关技术：Spring、Java。CVE：CVE-2026-59283。