GHSA-9qf2-26p9-2q2q – Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints (CVE‑2026‑47892)
Introduction The advisory GHSA-9qf2-26p9-2q2q (also referenced as CVE-2026-47892) documents a critical header predicate bypass in Spring Framework’s WebFlux functional endpoints when the application is deployed with…