{"schemaVersion":3,"id":"CVE-2026-22735","aliases":["UBUNTU-CVE-2026-22735","DEBIAN-CVE-2026-22735","CGA-362h-qhpq-qwmc","CGA-7qh6-4r46-35w6","CGA-7r4g-vgcj-q48j","CGA-99gj-3r6c-3gq9","CGA-cwgq-3fwf-r237","CGA-frr5-cq39-w4jq","CGA-hxvf-q2p6-4cp6","CGA-hxwq-h9v6-j5g4","CGA-2frv-fwjq-75qv","CGA-2hqr-f34m-66vq","CGA-2hr2-7mhh-c68j","CGA-3p38-f7q5-c543","CGA-3r2h-jq7r-6mpr","CGA-443c-qfmv-v6f9","CGA-46hj-r6j7-x39h","CGA-4hxf-xgwj-prwv","CGA-4jm3-33g3-c2c4","CGA-4jxw-f8fp-c864","CGA-4r6p-jvrv-8vc7","CGA-4v29-mrvx-8hjc","CGA-4wfg-37v4-7wgm","CGA-5439-j2r2-7g7c","CGA-58g9-4v85-25pv","CGA-593r-969g-36gw","CGA-5cv5-vgmv-f84r","CGA-5f62-gfq7-7c3x","CGA-5ffj-2p89-pxr5","CGA-5gx7-rpv7-m7rh","CGA-5mvv-62h8-x7rw","CGA-5x93-xpx9-v774","CGA-652p-ph6m-5fc2","CGA-6547-286j-j7wp","CGA-67v8-9vhv-p68q","CGA-72gj-57v5-7jvg","CGA-7c8g-rgp5-w4vw","CGA-7f4x-jwwp-r9g9","CGA-7q4w-j2jm-w3rr","CGA-7v28-8vw9-44v2","CGA-825p-5hh3-6h5q","CGA-8c5f-hj3x-q63g","CGA-8g37-vhvv-jw53","CGA-8gph-73h7-g75c","CGA-8rxv-xhwf-x4ph","CGA-9636-q96r-5jjw","CGA-96r6-cg7x-rh4c","CGA-9wfx-8x2c-859g","CGA-c773-m6h7-4v65","CGA-cf98-p4c8-9m5j","CGA-cg4h-mrcc-m7c9","CGA-cwh5-w3f8-649x","CGA-f535-9q9f-fwrg","CGA-f5wc-97xv-34fm","CGA-fcgj-f7fm-cvh4","CGA-fh29-57gq-hc23","CGA-fw4c-4g95-357g","CGA-fw83-jv99-4mgw","CGA-fwcm-6vfv-873w","CGA-fx94-hrf7-f4rf","CGA-g27x-3h32-58cg","CGA-g3vw-8936-gf4j","CGA-ggg9-3rcg-9p2q","CGA-gmpv-334p-jc2q","CGA-gq5q-5c3x-j9hf","CGA-h2xx-wphq-j6wq","CGA-h4f5-55c5-8qx4","CGA-hrwh-4j7x-f49h","CGA-jc2c-vj2x-5p85","CGA-jfm7-vc95-2p8f","CGA-jqv6-ppx8-39p3","CGA-m4r3-fv5v-xwqg","CGA-mq29-ph5g-8mrr","CGA-mqjf-774f-phcv","CGA-p452-p3gg-9wwm","CGA-pgw4-3hhw-368f","CGA-pw5p-6pwc-hhfj","GHSA-6hcq-hmm3-jj3c","CGA-px3x-jh98-3gg4","CGA-px6m-mpgf-97ph","CGA-pxjc-5vm4-xgw4","CGA-q4rv-wpcg-g6v5","CGA-qc7v-j5r4-fqmm","CGA-qhh8-32fw-j6qp","CGA-qjcm-jgc3-hh7g","CGA-qwcc-h233-f694","CGA-qxgc-rxq7-826j","CGA-r4hj-xp49-j4hf","CGA-r77c-4rqj-v7gq","CGA-r8jx-gvm6-3xhx","CGA-rpqw-97rm-57f2","CGA-rr92-p6h8-wp43","CGA-rw22-9mgf-4hp8","CGA-v8jh-63wp-w7qg","CGA-vc53-v3rw-x94q","CGA-vgqj-q2q5-ww3v","CGA-vv85-f3w5-r67r","CGA-vw9h-39mg-cxfm","CGA-w384-mj52-gq33","CGA-w39h-4v2q-85p7","CGA-w7mj-mmjx-q7cf","CGA-wj5w-qqr8-77x4","CGA-wjgh-5qwc-7hhj","CGA-x6qm-6f3m-3h2c","CGA-x9cv-h725-v2v8","CGA-x9h5-v299-c6r5","CGA-xj4v-65hq-q8c3"],"status":"published","duplicateOf":null,"title":null,"description":"Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE). This issue affects Spring Foundation: from 7.0.0 through 7.0.5, from 6.2.0 through 6.2.16, from 6.1.0 through 6.1.25, from 5.3.0 through 5.3.46.","dates":{"published":"2026-03-19T23:37:35.587Z","modified":"2026-03-20T14:44:48.043Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":2.6,"severity":"low","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":2.6,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":2.6,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","exploitability":3.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":2.6,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","exploitability":3.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":2.6,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","exploitability":3.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":2.6,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","exploitability":3.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":2.6,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","exploitability":3.1,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":2.6,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00117,"percentile":0.01538,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.005000000000000013,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00112},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00117,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00117,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00117,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00117,"percentile":0.01538}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00112,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00117,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00117,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00117,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00117,"percentile":0.01538}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-667","name":"Improper Locking","description":"The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/667.html"}],"affected":[{"vendor":"chainguard","product":"apache-activemq-5.19","name":"apache-activemq-5.19","label":"apache-activemq-5.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-5.19","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-activemq-6.1","name":"apache-activemq-6.1","label":"apache-activemq-6.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-6.1","purlType":"apk","versions":[{"text":"< 6.1.8-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.8-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-activemq-fips-5.19","name":"apache-activemq-fips-5.19","label":"apache-activemq-fips-5.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-fips-5.19","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-activemq-fips-6.1","name":"apache-activemq-fips-6.1","label":"apache-activemq-fips-6.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-activemq-fips-6.1","purlType":"apk","versions":[{"text":"< 6.1.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.1.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-registry","name":"apache-nifi-registry","label":"apache-nifi-registry","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-registry","purlType":"apk","versions":[{"text":"< 2.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-8.8","name":"camunda-8.8","label":"camunda-8.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-8.8","purlType":"apk","versions":[{"text":"< 8.8.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.8.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.6","name":"camunda-zeebe-8.6","label":"camunda-zeebe-8.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.6","purlType":"apk","versions":[{"text":"< 8.6.39-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.6.39-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.7","name":"camunda-zeebe-8.7","label":"camunda-zeebe-8.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.7","purlType":"apk","versions":[{"text":"< 8.7.27-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.7.27-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.8","name":"camunda-zeebe-8.8","label":"camunda-zeebe-8.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.8","purlType":"apk","versions":[{"text":"< 8.8.22-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.8.22-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor","name":"conductor","label":"conductor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor","purlType":"apk","versions":[{"text":"< 3.31.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.31.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor-fips","name":"conductor-fips","label":"conductor-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor-fips","purlType":"apk","versions":[{"text":"< 3.31.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.31.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.27","name":"geoserver-2.27","label":"geoserver-2.27","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.27","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.28","name":"geoserver-2.28","label":"geoserver-2.28","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.28","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafbat-ui","name":"kafbat-ui","label":"kafbat-ui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafbat-ui","purlType":"apk","versions":[{"text":"< 1.4.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafbat-ui-fips","name":"kafbat-ui-fips","label":"kafbat-ui-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafbat-ui-fips","purlType":"apk","versions":[{"text":"< 1.4.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.0","name":"kayenta-2025.0","label":"kayenta-2025.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.1","name":"kayenta-2025.1","label":"kayenta-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.2","name":"kayenta-2025.2","label":"kayenta-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.4","name":"kayenta-2025.4","label":"kayenta-2025.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.4","purlType":"apk","versions":[{"text":"< 2025.4.3-r7","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2025.4.3-r7 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2026.0","name":"kayenta-2026.0","label":"kayenta-2026.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2026.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2026.0.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2026.0.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2026.1","name":"kayenta-2026.1","label":"kayenta-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.0","name":"kayenta-fips-2025.0","label":"kayenta-fips-2025.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.1","name":"kayenta-fips-2025.1","label":"kayenta-fips-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.2","name":"kayenta-fips-2025.2","label":"kayenta-fips-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.4","name":"kayenta-fips-2025.4","label":"kayenta-fips-2025.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2025.4.3-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2025.4.3-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2026.0","name":"kayenta-fips-2026.0","label":"kayenta-fips-2026.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2026.0","purlType":"apk","versions":[{"text":"< 2026.0.2-r7","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 2026.0.2-r7 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2026.1","name":"kayenta-fips-2026.1","label":"kayenta-fips-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2026.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nacos","name":"nacos","label":"nacos","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nacos","purlType":"apk","versions":[{"text":"< 3.2.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nacos-docker","name":"nacos-docker","label":"nacos-docker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nacos-docker","purlType":"apk","versions":[{"text":"< 3.2.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ontop","name":"ontop","label":"ontop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ontop","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ontop-fips","name":"ontop-fips","label":"ontop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ontop-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-registry","name":"apache-nifi-registry","label":"apache-nifi-registry","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-registry","purlType":"apk","versions":[{"text":"< 2.8.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.1-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"libspring-java","name":"libspring-java","label":"libspring-java","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libspring-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libspring-java","name":"libspring-java","label":"libspring-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libspring-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.springframework","product":"spring-webflux","name":"org.springframework:spring-webflux","label":"spring-webflux","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework/spring-webflux","purlType":"maven","versions":[{"text":"≥ 7.0.0-M1, < 7.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.2.0, < 6.2.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, ≤ 6.1.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.3.0, ≤ 5.3.39","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.0.0-M1, < 7.0.6 | ≥ 6.2.0, < 6.2.17 | ≥ 6.0.0, ≤ 6.1.21 | ≥ 5.3.0, ≤ 5.3.39","eol":null,"hubHref":null},{"vendor":"org.springframework","product":"spring-webmvc","name":"org.springframework:spring-webmvc","label":"spring-webmvc","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.springframework/spring-webmvc","purlType":"maven","versions":[{"text":"≥ 7.0.0-M1, < 7.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.2.0, < 6.2.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.0.0, ≤ 6.1.21","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.3.0, ≤ 5.3.39","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.0.0-M1, < 7.0.6 | ≥ 6.2.0, < 6.2.17 | ≥ 6.0.0, ≤ 6.1.21 | ≥ 5.3.0, ≤ 5.3.39","eol":{"isEol":null,"eolDate":null,"matchMethod":"purl","cycle":null,"product":{"name":"spring-framework","label":"Spring Framework","category":"framework"}},"hubHref":null},{"vendor":"spring","product":"spring foundation","name":"Spring Foundation","label":"spring foundation","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.0.0, ≤ 7.0.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.2.0, ≤ 6.2.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.1.0, ≤ 6.1.25","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.3.0, ≤ 5.3.46","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.0.0, ≤ 7.0.5 | ≥ 6.2.0, ≤ 6.2.16 | ≥ 6.1.0, ≤ 6.1.25 | ≥ 5.3.0, ≤ 5.3.46","eol":null,"hubHref":"/vendor/spring/spring_foundation"},{"vendor":"vmware","product":"spring_framework","name":"Spring Framework","label":"spring_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.3.47","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.1.0, < 6.1.26","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.2.0, < 6.2.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.0.0, < 7.0.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.47 | ≥ 6.1.0, < 6.1.26 | ≥ 6.2.0, < 6.2.17 | ≥ 7.0.0, < 7.0.6","eol":null,"hubHref":"/vendor/vmware/spring_framework"}],"affectedCount":42,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://spring.io/security/cve-2026-22735","label":"spring.io/security/cve-2026-22735","hostname":"spring.io","tags":["REPORT","WEB","Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-22735","label":"ubuntu.com/security/CVE-2026-22735","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-22735","label":"www.cve.org/CVERecord?id=CVE-2026-22735","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-22735","label":"security-tracker.debian.org/tracker/CVE-2026-22735","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22735","label":"nvd.nist.gov/vuln/detail/CVE-2026-22735","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/spring-projects/spring-framework","label":"github.com/spring-projects/spring-framework","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-37VV-VP42-QRC6"]},"timeline":[{"kind":"published","date":"2026-03-19T23:37:35.587Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-20T14:44:48.043Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":10,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T15:07:17.394Z","stale":false,"partial":false}}