Security
فارسی
All products

org.springframework:spring-expression

Maven · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework Denial of Service via Unbounded Cache in SpELCVE-2026-41851 · GHSA-WXPP-56Q6-5PCG org.springframework:spring-expressionOpenShift Developer Tools and Services/spring-expression MavenRed Hat Medium Fix reported
Spring Framework Algorithmic Denial of Service via SpEL ExpressionsCVE-2026-41850 · GHSA-R5W3-XV2F-J59Q org.springframework:spring-expressionOpenShift Developer Tools and Services/spring-expression MavenRed Hat High Fix reported
Spring Framework Arbitrary Method Invocation in SpEL ExpressionsCVE-2026-41852 · GHSA-9F52-RJQV-25QV org.springframework:spring-expressionOpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8 MavenRed Hat Low Fix reported
Spring Framework vulnerable to Denial of ServiceCVE-2024-38808 · GHSA-9CMQ-M9J5-MVWW org.springframework:spring-expressionRed Hat Fuse 7/org.apache.servicemix.bundles/org.apache.servicemix.bundles.spring-expression MavenRed Hat Medium Fix reported
Spring Framework Denial of Service via Integer Overflow in SpEL ExpressionsCVE-2026-41849 · GHSA-775G-4XR8-78H8 org.springframework:spring-expression Maven High No fix reported
Spring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861 · GHSA-564R-HJ7V-MCR5 org.springframework:spring-expressionRed Hat AMQ Broker 7/springframework MavenRed Hat Medium Fix reported
Spring Framework vulnerable to denial of serviceCVE-2023-20863 · GHSA-WXQC-PXW9-G2P8 org.springframework:spring-expressionRed Hat Fuse 7/springframework MavenRed Hat High Fix reported
Allocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22950 · GHSA-558X-2XJG-6232 org.springframework:spring-expressionLogging Subsystem for Red Hat OpenShift/spring-expression MavenRed Hat Medium Fix reported