Multiple Vulnerabilities Discovered in Spring Framework Enable DoS and Security Bypass

Multiple vulnerabilities were discovered in Spring Framework on April 20, 2026, as reported by CERT-FR. These flaws enable remote attackers to trigger a denial of service (DoS) and bypass security policies. The notice specifies no CVE identifiers, technical details, or affected version ranges. The impacts are limited to the stated exploitation vectors, with no additional attack methods or mitigations described. The advisory originates from the French government's cybersecurity agency.