Root has patched CVE-2016-1000027 in the io.root.org.springframework:spring-web package for Root:Maven. Multiple fixed versions available.
{ "source": "Root", "severity": "CRITICAL", "distro": "maven", "distro_version": "" }
"root.io.3"
"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2016-1000027.json"
true
2.0
"5.3.23"
[ "5.3.23-root.io.2", "5.3.23-root.io.3" ]
""
1.0
"5.3.23-aikido.3"
[ "5.3.23-aikido.3" ]