Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-expression@5.2.23.RELEASE
purl pkg:maven/org.springframework/spring-expression@5.2.23.RELEASE
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-r8q8-2grb-7ug8 In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition. CVE-2023-20861
GHSA-564r-hj7v-mcr5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T07:58:51.266777+00:00 GithubOSV Importer Fixing VCID-r8q8-2grb-7ug8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/03/GHSA-564r-hj7v-mcr5/GHSA-564r-hj7v-mcr5.json 38.6.0