Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-j9f9-w8pj-32f8
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring Framework Server Sent Event stream corruption while rendering fragments 27 Aug
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-pc63-qcmh-9cmg
  • Maven/org.springframework:spring-webmvc
 Spring Framework Improper Path Limitation in XsltView 27 Aug
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-957g-f97v-vppc
  • Maven/org.springframework:spring-webmvc
 Spring Framework Cross-site Scripting via JSP Form Tags 09 Jun
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-cjpg-rgq5-fr37
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux 09 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-3chg-m5w7-qfv5
  • Maven/org.springframework:spring-webmvc
 Spring Framework Cross-site Scripting via JavaScriptUtils 09 Jun
  • Fix available
  • Severity - 7.1 (High)
GHSA-72pg-x5f8-j25j
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux 09 Jun
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-h3qp-gqrc-q736
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring Framework Open Redirect in Spring MVC and WebFlux 09 Jun
  • Fix available
  • Severity - 4.2 (Medium)
GHSA-mq64-j8f9-9gcj
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux 09 Jun
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-x23c-287f-qqv5
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux 09 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-6p4f-wcwh-5vvm
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources 29 Apr
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-wg35-8jpf-2xv3
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. 29 Apr
  • Fix available
  • Severity - 3.1 (Low)
GHSA-4773-3jfm-qmx3
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring Framework Improper Path Limitation with Script View Templates 20 Mar
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-6hcq-hmm3-jj3c
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring MVC and WebFlux has Server Sent Event stream corruption 20 Mar
  • Fix available
  • Severity - 2.6 (Low)
GHSA-r936-gwx5-v52f
  • Maven/org.springframework:spring-webmvc
 Spring Framework MVC Applications Path Traversal Vulnerability 18 Aug 2025
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-g5vr-rgqm-vf78
  • Maven/org.springframework:spring-webflux
  • Maven/org.springframework:spring-webmvc
 Spring Framework Path Traversal vulnerability 19 Dec 2024
  • Fix available
  • Severity - 7.5 (High)
GHSA-w3c8-7r8f-9jp8
  • Maven/org.springframework:spring-webmvc
 Spring MVC controller vulnerable to a DoS attack 18 Nov 2024
  • Fix available
  • Severity - 5.3 (Medium)
Load more...