Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-7m2p-62gw-p8qq
  • Maven/org.springframework:spring-web
 Spring Framework Server-Side Request Forgery via UriComponentsBuilder 09 Jun
  • Fix available
  • Severity - 4.2 (Medium)
GHSA-6r3c-xf4w-jxjm
  • Maven/org.springframework:spring-web
 Spring Framework vulnerable to a reflected file download (RFD) 13 Jun 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-4gc7-5j7h-4qph
  • Maven/org.springframework:spring-context
  • Maven/org.springframework:spring-web
 Spring Framework DataBinder Case Sensitive Match Exception 18 Oct 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-2rmj-mq67-h97g
  • Maven/org.springframework:spring-web
 Spring Framework DoS via conditional HTTP request 24 Sep 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-2wrp-6fg6-hmc5
  • Maven/org.springframework:spring-web
 Spring Framework URL Parsing with Host Validation 16 Apr 2024
  • Fix available
  • Severity - 8.1 (High)
GHSA-hgjh-9rj2-g67j
  • Maven/org.springframework:spring-web
 Spring Framework URL Parsing with Host Validation Vulnerability 16 Mar 2024
  • Fix available
  • Severity - 8.1 (High)
GHSA-ccgv-vj62-xf9h
  • Maven/org.springframework:spring-web
 Spring Web vulnerable to Open Redirect or Server Side Request Forgery 23 Feb 2024
  • Fix available
  • Severity - 8.1 (High)
GHSA-gfwj-fwqj-fp3v
  • Maven/org.springframework:spring-web
 Improper Privilege Management in Spring Framework 24 May 2022
  • Fix available
  • Severity - 7.8 (High)
GHSA-4wrc-f8pq-fpqp
  • Maven/org.springframework:spring-web
 Pivotal Spring Framework contains unsafe Java deserialization methods 24 May 2022
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-g6hf-f9cq-q7w7
  • Maven/org.springframework:spring-web
 Cross-Site Request Forgery in Spring Framework 13 May 2022
  • Fix available
GHSA-xjrf-8x4f-43h4
  • Maven/org.springframework:spring-web
 Improper Neutralization of Input During Web Page Generation in Spring Framework 05 May 2022
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-6v7w-535j-rq5m
  • Maven/org.springframework:spring-web
 Pivotal Spring Framework DoS Attack with XML Input 17 Oct 2018
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-9gcm-f4x3-8jpw
  • Maven/org.springframework:spring-web
 Spring Framework Cross Site Tracing (XST) 16 Oct 2018
  • Fix available
  • Severity - 5.9 (Medium)