Search for packages
| purl | pkg:maven/org.springframework/spring-web@5.3.39 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-kpma-e8rd-b7c8
Aliases: CVE-2016-1000027 GHSA-4wrc-f8pq-fpqp |
Pivotal Spring Framework contains unsafe Java deserialization methods Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. Maintainers recommend investigating alternative components or a potential mitigating control. Version 4.2.6 and 3.2.17 contain [enhanced documentation](https://github.com/spring-projects/spring-framework/commit/5cbe90b2cd91b866a5a9586e460f311860e11cfa) advising users to take precautions against unsafe Java deserialization, version 5.3.0 [deprecate the impacted classes](https://github.com/spring-projects/spring-framework/issues/25379) and version 6.0.0 [removed it entirely](https://github.com/spring-projects/spring-framework/issues/27422). |
Affected by 5 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T22:02:10.078939+00:00 | GitLab Importer | Affected by | VCID-kpma-e8rd-b7c8 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-web/CVE-2016-1000027.yml | 38.4.0 |
| 2026-04-11T23:17:47.742927+00:00 | GitLab Importer | Affected by | VCID-kpma-e8rd-b7c8 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-web/CVE-2016-1000027.yml | 38.3.0 |
| 2026-04-02T23:25:28.992435+00:00 | GitLab Importer | Affected by | VCID-kpma-e8rd-b7c8 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-web/CVE-2016-1000027.yml | 38.1.0 |
| 2026-04-01T17:46:15.596295+00:00 | GitLab Importer | Affected by | VCID-kpma-e8rd-b7c8 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-web/CVE-2016-1000027.yml | 38.0.0 |