cve-2026-47891 - MEDIUM - Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder
A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit.
| CVE | CVE-2026-47891 |
|---|---|
| 情報源 | Spring Security Advisories |
| 取得日時 | 2026/10/22 1:17 |
| データ | Markdown JSON |