Spring Reactor Core vulnerabilities
2 vulnerabilities
Known vulnerabilities in Spring Reactor Core, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-47857broadcomreactor_core+1
EPSS score0.37%
In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition.
Reactor Core 3.8.0 - 3.8.6
Reactor Core 3.5.0 - 3.7.19
Reactor Core 3.4.41 and earlierCVE-2026-47863broadcomreactor_core+1EPSS score0.40%
In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition.
Reactor Core 3.8.0 - 3.8.6
Reactor Core 3.7.19 and earlier