What is GHSA-j94g-vwjh-xffq?

GHSA-j94g-vwjh-xffq is a security advisory published by GitHub Security Advisories with Medium severity. UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching...

Which CVE IDs does GHSA-j94g-vwjh-xffq cover?

GHSA-j94g-vwjh-xffq covers the following CVE IDs: CVE-2026-47883. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j94g-vwjh-xffq?

GHSA-j94g-vwjh-xffq has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-j94g-vwjh-xffqMediumCVSS 6.1

UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-47883 →

📋 Description

UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC and Spring WebFlux. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-47883
https://spring.io/security/cve-2026-47883
https://github.com/advisories/GHSA-j94g-vwjh-xffq