What is GHSA-whpp-xv3h-rwxf?

GHSA-whpp-xv3h-rwxf is a security advisory published by GitHub Security Advisories with High severity. When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may...

Which CVE IDs does GHSA-whpp-xv3h-rwxf cover?

GHSA-whpp-xv3h-rwxf covers the following CVE IDs: CVE-2026-40999. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-whpp-xv3h-rwxf?

GHSA-whpp-xv3h-rwxf has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

GHSA-whpp-xv3h-rwxfHighCVSS 8.6

When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may...

Vendor

GitHub Security Advisories

Published

June 11, 2026

Last Modified

June 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-40999 →

📋 Description

When WS-Addressing is used with non-anonymous ReplyTo or FaultTo addresses, Spring WS may initiate outbound connections through configured WebServiceMessageSender instances to destinations taken directly from request headers without verifying that those destinations are safe to connect to.

Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-40999
https://spring.io/security/cve-2026-40999
https://github.com/advisories/GHSA-whpp-xv3h-rwxf