cve-2026-47886 - MEDIUM - Spring Framework Denial of Service via Unbounded Exponentiation in SpEL Expressions

Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator ( ^ ) is used with a BigDecimal or BigInteger operand and a large exponent value. Evaluation of such an expression can consume excessive CPU time and JVM heap memory, leading to application degradation or unavailability. More precisely, an application can be vulnerable when all the following are true: The application accepts and evaluates untrusted or user-controlled SpEL expressions. A BigDecimal or BigInteger value is accessible…

Spring Security Advisoriesで読む