Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform 6/springframework

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatchCVE-2023-20860 · GHSA-7PHW-CXX7-Q9VQ org.springframework:spring-webmvcorg.springframework:spring MavenRed Hat Critical Fix reported
Spring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861 · GHSA-564R-HJ7V-MCR5 org.springframework:spring-expressionRed Hat AMQ Broker 7/springframework MavenRed Hat Medium Fix reported
Integer overflow in BCrypt class in Spring SecurityCVE-2022-22976 · GHSA-WX54-3278-M5G4 org.springframework.security:spring-security-coreRed Hat Decision Manager 7/springframework MavenRed Hat Medium Fix reported
Improper handling of case sensitivity in Spring FrameworkCVE-2022-22968 · GHSA-G5MM-VMX4-3RG7 org.springframework:spring-contextLogging Subsystem for Red Hat OpenShift/springframework MavenRed Hat High Fix reported
Denial of service in Spring FrameworkCVE-2022-22970 · GHSA-HH26-6XWR-GGV7 org.springframework:spring-beansRed Hat Decision Manager 7/springframework MavenRed Hat High Fix reported
Allocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22971 · GHSA-RQPH-VQWM-22VC org.springframework:spring-messagingRed Hat Decision Manager 7/springframework MavenRed Hat Medium Fix reported