All products

org.springframework:spring

Maven · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatchCVE-2023-20860 · GHSA-7PHW-CXX7-Q9VQ org.springframework:spring-webmvcorg.springframework:spring MavenRed Hat Critical Fix reported
Improper Control of Generation of Code ('Code Injection') in Spring FrameworkCVE-2010-1622 · GHSA-VPR3-F594-MG5G org.springframework:spring Maven Medium Fix reported
Improper Output Neutralization for Logs in Spring FrameworkCVE-2021-22096 · GHSA-RFMP-97JJ-H8M6 org.springframework:spring-coreorg.springframework:spring MavenRed Hat Medium Fix reported