Security
فارسی
All products

org.springframework:spring-web

Maven · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework DoS via conditional HTTP requestCVE-2024-38809 · GHSA-2RMJ-MQ67-H97G org.springframework:spring-webA-MQ Clients 2/spring-web MavenRed Hat Medium Fix reported
Spring Framework vulnerable to a reflected file download (RFD)CVE-2025-41234 · GHSA-6R3C-XF4W-JXJM org.springframework:spring-webOpenShift Developer Tools and Services/jenkins MavenRed Hat Medium Fix reported
Spring Framework DataBinder Case Sensitive Match ExceptionCVE-2024-38820 · GHSA-4GC7-5J7H-4QPH org.springframework:spring-contextorg.springframework:spring-web Maven Medium Fix reported
Spring Framework URL Parsing with Host ValidationCVE-2024-22262 · GHSA-2WRP-6FG6-HMC5 org.springframework:spring-webRed Hat Fuse 7/springframework MavenRed Hat High Fix reported
Spring Framework URL Parsing with Host Validation VulnerabilityCVE-2024-22259 · GHSA-HGJH-9RJ2-G67J org.springframework:spring-webRed Hat Fuse 7/springframework MavenRed Hat High Fix reported
Spring Web vulnerable to Open Redirect or Server Side Request ForgeryCVE-2024-22243 · GHSA-CCGV-VJ62-XF9H org.springframework:spring-webRed Hat build of Apache Camel for Spring Boot 3/springframework MavenRed Hat High Fix reported
Pivotal Spring Framework contains unsafe Java deserialization methodsCVE-2016-1000027 · GHSA-4WRC-F8PQ-FPQP org.springframework:spring-web Maven Critical Fix reported
Spring Framework Server-Side Request Forgery via UriComponentsBuilderCVE-2026-41854 · GHSA-7M2P-62GW-P8QQ org.springframework:spring-webOpenShift Developer Tools and Services/spring-web MavenRed Hat Medium Fix reported
Improper Neutralization of Input During Web Page Generation in Spring FrameworkCVE-2013-6430 · GHSA-XJRF-8X4F-43H4 org.springframework:spring-webRed Hat JBoss Enterprise Application Platform 4/spring MavenRed Hat Medium Fix reported
Cross-Site Request Forgery in Spring FrameworkCVE-2013-6429 · GHSA-G6HF-F9CQ-Q7W7 org.springframework:spring-webOpenShift Enterprise 1/activemq MavenRed Hat Medium Fix reported
Spring Framework Cross Site Tracing (XST)CVE-2018-11039 · GHSA-9GCM-F4X3-8JPW org.springframework:spring-webRed Hat JBoss BRMS 5/springframework MavenRed Hat Medium Fix reported
Pivotal Spring Framework DoS Attack with XML InputCVE-2015-3192 · GHSA-6V7W-535J-RQ5M org.springframework:spring-webRed Hat JBoss BRMS 5/springframework MavenRed Hat Medium Fix reported
Improper Privilege Management in Spring FrameworkCVE-2021-22118 · GHSA-GFWJ-FWQJ-FP3V org.springframework:spring-webRed Hat OpenShift Container Platform 3.11/jenkins MavenRed Hat High Fix reported