Skip to content
Sign in
3.7 Low

CVE-2026-59277 Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing…

Description

Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal (private) or external (public) network. Spring Security 7.1.0

Affected products and versions

Product Affected versions Fixed in
Spring Security 7.1.0 No fix stated

Other CVEs of Spring Security

The 29 CVEs of Spring Security →
CVE-2026-59276 Several components in Spring Security compare security-sensitive values using standard string equality (String.equals())… 5.9 Medium CVE-2026-59270 Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative… 9.4 Critical CVE-2026-47877 Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding 8.2 High CVE-2026-47842 Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as… 6.5 Medium
Track this CVE