cve-2026-47891
HIGH CVSS 7.5 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2026-08-27 05:21 UTC
- Last Modified
- 2026-09-02
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47891.json"
}
],
"title": "org.springframework/spring-webflux: org.springframework/spring-web: Spring WebFlux: Denial of Service due to maxInMemorySize bypass",
"tracking": {
"current_release_date": "2026-09-02T19:01:25+00:00",
"generator": {
"date": "2026-09-02T19:01:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "CVE-2026-47891",
"initial_release_date": "2026-08-27T05:21:39.288000+00:00",
"revision_history": [
{
"date": "2026-08-27T05:21:39.288000+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-02T18:28:17+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-09-02T19:01:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services",
"product": {
"name": "OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools"
}
}
}
],
"category": "product_family",
"name": "OpenShift Developer Tools and Services"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product": {
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:camel_quarkus:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7",
"product": {
"name": "Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 9"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Fuse 7",
"product": {
"name": "Red Hat Fuse 7",
"product_id": "red_hat_fuse_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_fuse:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Fuse 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces",
"product": {
"name": "Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Single Sign-On 7",
"product": {
"name": "Red Hat Single Sign-On 7",
"product_id": "red_hat_single_sign-on_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Single Sign-On 7"
},
{
"category": "product_version",
"name": "jenkins.src",
"product": {
"name": "jenkins.src",
"product_id": "jenkins.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins@2.516.3.1758206866-3.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "ocp-tools-4/jenkins-rhel8",
"product": {
"name": "ocp-tools-4/jenkins-rhel8",
"product_id": "ocp-tools-4/jenkins-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-rhel8?repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel8"
}
}
},
{
"category": "product_version",
"name": "ocp-tools-4/jenkins-rhel9",
"product": {
"name": "ocp-tools-4/jenkins-rhel9",
"product_id": "ocp-tools-4/jenkins-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-rhel9?repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel9"
}
}
},
{
"category": "product_version",
"name": "spring-web",
"product": {
"name": "spring-web",
"product_id": "spring-web",
"product_identification_helper": {
"purl": "pkg:maven/org.springframework/spring-web@6.2.19"
}
}
},
{
"category": "product_version",
"name": "xbean-javadoc",
"product": {
"name": "xbean-javadoc",
"product_id": "xbean-javadoc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xbean-javadoc"
}
}
},
{
"category": "product_version",
"name": "xbean.src",
"product": {
"name": "xbean.src",
"product_id": "xbean.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xbean@3.13-6.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "xbean.src::javapackages-tools:201801",
"product": {
"name": "xbean.src (javapackages-tools:201801)",
"product_id": "xbean.src::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xbean?arch=src&rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "xbean-javadoc::javapackages-tools:201801",
"product": {
"name": "xbean-javadoc (javapackages-tools:201801)",
"product_id": "xbean-javadoc::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xbean-javadoc?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "xbean::javapackages-tools:201801",
"product": {
"name": "xbean (javapackages-tools:201801)",
"product_id": "xbean::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xbean?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "resteasy::pki-core:10.6",
"product": {
"name": "resteasy (pki-core:10.6)",
"product_id": "resteasy::pki-core:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy?rpmmod=pki-core:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy.src::pki-core:10.6",
"product": {
"name": "resteasy.src (pki-core:10.6)",
"product_id": "resteasy.src::pki-core:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-core:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy-javadoc::pki-core:10.6",
"product": {
"name": "resteasy-javadoc (pki-core:10.6)",
"product_id": "resteasy-javadoc::pki-core:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-core:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy::pki-deps:10.6",
"product": {
"name": "resteasy (pki-deps:10.6)",
"product_id": "resteasy::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy?rpmmod=pki-deps:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy.src::pki-deps:10.6",
"product": {
"name": "resteasy.src (pki-deps:10.6)",
"product_id": "resteasy.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-deps:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy-javadoc::pki-deps:10.6",
"product": {
"name": "resteasy-javadoc (pki-deps:10.6)",
"product_id": "resteasy-javadoc::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-deps:10.6"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy-jackson2-provider",
"product": {
"name": "pki-resteasy-jackson2-provider",
"product_id": "pki-resteasy-jackson2-provider",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy-jackson2-provider"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy-servlet-initializer",
"product": {
"name": "pki-resteasy-servlet-initializer",
"product_id": "pki-resteasy-servlet-initializer",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy-servlet-initializer"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy",
"product": {
"name": "pki-resteasy",
"product_id": "pki-resteasy",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy-core",
"product": {
"name": "pki-resteasy-core",
"product_id": "pki-resteasy-core",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy-core"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy-client",
"product": {
"name": "pki-resteasy-client",
"product_id": "pki-resteasy-client",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy-client"
}
}
},
{
"category": "product_version",
"name": "spring-webflux",
"product": {
"name": "spring-webflux",
"product_id": "spring-webflux",
"product_identification_helper": {
"purl": "pkg:maven/org.springframework/spring-webflux@5.2.13.RELEASE"
}
}
},
{
"category": "product_version",
"name": "devspaces/openvsx-rhel9",
"product": {
"name": "devspaces/openvsx-rhel9",
"product_id": "devspaces/openvsx-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9?repository_url=registry.redhat.io/devspaces/openvsx-rhel9"
}
}
},
{
"category": "product_version",
"name": "devspaces/pluginregistry-rhel9",
"product": {
"name": "devspaces/pluginregistry-rhel9",
"product_id": "devspaces/pluginregistry-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9?repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins.src as a component of OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services:jenkins.src"
},
"product_reference": "jenkins.src",
"relates_to_product_reference": "openshift_developer_tools_and_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocp-tools-4/jenkins-rhel8 as a component of OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8"
},
"product_reference": "ocp-tools-4/jenkins-rhel8",
"relates_to_product_reference": "openshift_developer_tools_and_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocp-tools-4/jenkins-rhel9 as a component of OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9"
},
"product_reference": "ocp-tools-4/jenkins-rhel9",
"relates_to_product_reference": "openshift_developer_tools_and_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spring-web as a component of Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3:spring-web"
},
"product_reference": "spring-web",
"relates_to_product_reference": "red_hat_build_of_apache_camel_4_for_quarkus_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xbean-javadoc as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:xbean-javadoc"
},
"product_reference": "xbean-javadoc",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xbean.src as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:xbean.src"
},
"product_reference": "xbean.src",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy-javadoc (pki-core:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6"
},
"product_reference": "resteasy-javadoc::pki-core:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy-javadoc (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6"
},
"product_reference": "resteasy-javadoc::pki-deps:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy.src (pki-core:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6"
},
"product_reference": "resteasy.src::pki-core:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6"
},
"product_reference": "resteasy.src::pki-deps:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy (pki-core:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy::pki-core:10.6"
},
"product_reference": "resteasy::pki-core:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy::pki-deps:10.6"
},
"product_reference": "resteasy::pki-deps:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xbean-javadoc (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:xbean-javadoc::javapackages-tools:201801"
},
"product_reference": "xbean-javadoc::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xbean.src (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:xbean.src::javapackages-tools:201801"
},
"product_reference": "xbean.src::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xbean (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:xbean::javapackages-tools:201801"
},
"product_reference": "xbean::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy"
},
"product_reference": "pki-resteasy",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy-client as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy-client"
},
"product_reference": "pki-resteasy-client",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy-core as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy-core"
},
"product_reference": "pki-resteasy-core",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy-jackson2-provider as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider"
},
"product_reference": "pki-resteasy-jackson2-provider",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy-servlet-initializer as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer"
},
"product_reference": "pki-resteasy-servlet-initializer",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xbean.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:xbean.src"
},
"product_reference": "xbean.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spring-web as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:spring-web"
},
"product_reference": "spring-web",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spring-webflux as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:spring-webflux"
},
"product_reference": "spring-webflux",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/openvsx-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9"
},
"product_reference": "devspaces/openvsx-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/pluginregistry-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9"
},
"product_reference": "devspaces/pluginregistry-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spring-web as a component of Red Hat Single Sign-On 7",
"product_id": "red_hat_single_sign-on_7:spring-web"
},
"product_reference": "spring-web",
"relates_to_product_reference": "red_hat_single_sign-on_7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-47891",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-27T06:20:57.354709+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"openshift_developer_tools_and_services:jenkins.src",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9",
"red_hat_build_of_apache_camel_4_for_quarkus_3:spring-web",
"red_hat_enterprise_linux_7:xbean-javadoc",
"red_hat_enterprise_linux_7:xbean.src",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_8:xbean-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:xbean.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:xbean::javapackages-tools:201801",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_enterprise_linux_9:xbean.src",
"red_hat_fuse_7:spring-web",
"red_hat_fuse_7:spring-webflux",
"red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
"red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
"red_hat_single_sign-on_7:spring-web"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2524835"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring WebFlux applications that utilize the Aalto XML processor to parse XML input. A remote attacker could exploit this vulnerability by sending specially crafted XML, causing the application to bypass the maxInMemorySize limit. This can lead to excessive memory consumption, potentially resulting in a denial of service (DoS) condition for the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.springframework/spring-webflux: org.springframework/spring-web: Spring WebFlux: Denial of Service due to maxInMemorySize bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "CVE-2026-47891 affects Spring Framework's WebFlux module only when an application uses the reactive WebFlux stack together with the Aalto XML processor (com.fasterxml:aalto-xml) to parse XML request bodies. Red Hat products ship spring-web/spring-webflux transitively as part of servlet-based (Spring MVC) or non-web integrations; none run the reactive WebFlux XML-decode path, and the Aalto XML processor is not shipped in any Red Hat product (verified across the portfolio). The vulnerable code path is therefore never in execution, and these products are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"known_not_affected": [
"openshift_developer_tools_and_services:jenkins.src",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9",
"red_hat_build_of_apache_camel_4_for_quarkus_3:spring-web",
"red_hat_enterprise_linux_7:xbean-javadoc",
"red_hat_enterprise_linux_7:xbean.src",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_8:xbean-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:xbean.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:xbean::javapackages-tools:201801",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_enterprise_linux_9:xbean.src",
"red_hat_fuse_7:spring-web",
"red_hat_fuse_7:spring-webflux",
"red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
"red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
"red_hat_single_sign-on_7:spring-web"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47891"
},
{
"category": "external",
"summary": "RHBZ#2524835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524835"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47891"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47891",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47891"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-47891",
"url": "https://spring.io/security/cve-2026-47891"
}
],
"release_date": "2026-08-27T05:21:39.288000+00:00",
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openshift_developer_tools_and_services:jenkins.src",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9",
"red_hat_build_of_apache_camel_4_for_quarkus_3:spring-web",
"red_hat_enterprise_linux_7:xbean-javadoc",
"red_hat_enterprise_linux_7:xbean.src",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_8:xbean-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:xbean.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:xbean::javapackages-tools:201801",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_enterprise_linux_9:xbean.src",
"red_hat_fuse_7:spring-web",
"red_hat_fuse_7:spring-webflux",
"red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
"red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
"red_hat_single_sign-on_7:spring-web"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important",
"product_ids": [
"openshift_developer_tools_and_services:jenkins.src",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9",
"red_hat_build_of_apache_camel_4_for_quarkus_3:spring-web",
"red_hat_enterprise_linux_7:xbean-javadoc",
"red_hat_enterprise_linux_7:xbean.src",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_8:xbean-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:xbean.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:xbean::javapackages-tools:201801",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_enterprise_linux_9:xbean.src",
"red_hat_fuse_7:spring-web",
"red_hat_fuse_7:spring-webflux",
"red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
"red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
"red_hat_single_sign-on_7:spring-web"
]
}
],
"title": "org.springframework/spring-webflux: org.springframework/spring-web: Spring WebFlux: Denial of Service due to maxInMemorySize bypass"
}
]
}