CVE-2026-40988
HighAdvisory
Published 10 Jun 2026In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.003
- 26th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 7
- of 17,781 indexed, latest versions
- Container images
- 7
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)
Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 7 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| spring-security-saml2-service-providermaven | 6.3.6, 6.3.10, 6.4.5, 6.4.6+3 more | 6.5.11, 7.0.6 | 7 |
- OSV records
- GHSA-m69x-pw9p-7j3q
Charts affected
7 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| structurizrvirtualrootVerified publisher | 0.5.0 | 1 of 1See more | 4,378 |
| cbioportalcbioportalOfficialVerified publisher | 1.1.0 | 1 of 1See more | 3,674 |
| reportportalreportportal-ioOfficialVerified publisher | 26.8.12 | 1 of 15See more | 11,869 |
| blackduck-alertblackduck | 8.4.0 | 1 of 4See more | 4,292 |
| bluerange-serverbluerangeOfficialVerified publisher | 1.3.1 | 1 of 1See more | 1,816 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 25,017 |
| stirling-pdfrubxkubeVerified publisher | 0.1.2 | 1 of 1See more | 6,207 |
Container images carrying it
7 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| blackducksoftware/ | 90cca32de2cc | spring-security-saml2-service-provider | no fix listed | 1 |
| bluerange/ | 07c8f73b55df | spring-security-saml2-service-provider | no fix listed | 1 |
| cbioportal/ | 08debbd2dbf9 | spring-security-saml2-service-provider | 6.5.11 | 1 |
| openbas/ | d986d80b0a75 | spring-security-saml2-service-provider | no fix listed | 1 |
| reportportal/ | 6a954407b417 | spring-security-saml2-service-provider | 6.5.11 | 1 |
| structurizr/ | 4b5ffb5119c8 | spring-security-saml2-service-provider | no fix listed | 1 |
| ghcr.io/ | 3b3670fce70b | spring-security-saml2-service-provider | 7.0.6 | 1 |