A new zero-day vulnerability in the Spring Core Java framework called 'Spring4Shell' has been publicly disclosed, allowing unauthenticated remote code execution on applications.

The collaboration combines Azul's commercial OpenJDK distributions with Chainguard's container security technology to produce what the companies describe as "zero-CVE" Java containers for versions 21 ...

A new vulnerability in Spring Core, a Java framework, does not appear to be as severe as the Log4j vulnerability known as Log4Shell. Skip to main content. Events Video Special Issues Jobs ...