Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/50616?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/50616?format=api", "purl": "pkg:maven/org.springframework/spring-web@3.2.4.RELEASE", "type": "maven", "namespace": "org.springframework", "name": "spring-web", "version": "3.2.4.RELEASE", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3.2.14", "latest_non_vulnerable_version": "6.1.14", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9929?format=api", "vulnerability_id": "VCID-gzr8-crs2-8ygz", "summary": "", "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0400.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2014-0400.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6429", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.38725", "scoring_system": "epss", "scoring_elements": "0.97327", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6429" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6429", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6429" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6430", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6430" }, { "reference_url": "http://secunia.com/advisories/57915", "reference_id": "", "reference_type": "", "scores": [], "url": "http://secunia.com/advisories/57915" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/2ae6a6a3415eebc57babcb9d3e5505887eda6d8", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/2ae6a6a3415eebc57babcb9d3e5505887eda6d8" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/7387cb990e35b0f1b573faf29d4f9ae183d7a5e", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/7387cb990e35b0f1b573faf29d4f9ae183d7a5e" }, { "reference_url": "https://github.com/spring-projects/spring-framework/issues/15704", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/issues/15704" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755" }, { "reference_url": "https://jira.spring.io/browse/SPR-11078?redirect=false", "reference_id": "", "reference_type": "", "scores": [], "url": "https://jira.spring.io/browse/SPR-11078?redirect=false" }, { "reference_url": "https://bugzilla.redhat.com/CVE-2013-6429", "reference_id": "CVE-2013-6429", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/CVE-2013-6429" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6429", "reference_id": "CVE-2013-6429", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6429" }, { "reference_url": "http://www.gopivotal.com/security/cve-2013-6429", "reference_id": "CVE-2013-6429", "reference_type": "", "scores": [], "url": "http://www.gopivotal.com/security/cve-2013-6429" }, { "reference_url": "https://github.com/advisories/GHSA-g6hf-f9cq-q7w7", "reference_id": "GHSA-g6hf-f9cq-q7w7", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g6hf-f9cq-q7w7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/50625?format=api", "purl": "pkg:maven/org.springframework/spring-web@3.2.5.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-m3qs-d7va-vyhn" }, { "vulnerability": "VCID-rxkj-ex5j-k3g3" }, { "vulnerability": "VCID-sk9s-beg1-mybe" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@3.2.5.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/50617?format=api", "purl": "pkg:maven/org.springframework/spring-web@4.0.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-m3qs-d7va-vyhn" }, { "vulnerability": "VCID-rxkj-ex5j-k3g3" }, { "vulnerability": "VCID-sk9s-beg1-mybe" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@4.0.0.RELEASE" } ], "aliases": [ "CVE-2013-6429", "GHSA-g6hf-f9cq-q7w7" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gzr8-crs2-8ygz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10046?format=api", "vulnerability_id": "VCID-m3qs-d7va-vyhn", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-5211", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01918", "scoring_system": "epss", "scoring_elements": "0.83643", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-5211" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/03f547eb9868f48f44d59b56067d4ac4740672c3", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/03f547eb9868f48f44d59b56067d4ac4740672c3" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/2bd1daa75ee0b8ec33608ca6ab065ef3e1815543", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/2bd1daa75ee0b8ec33608ca6ab065ef3e1815543" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/a95c3d820dbc4c3ae752f1b3ee22ee860b162402", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/a95c3d820dbc4c3ae752f1b3ee22ee860b162402" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html" }, { "reference_url": "https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector" }, { "reference_url": "https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/" }, { "reference_url": "http://pivotal.io/security/cve-2015-5211", "reference_id": "CVE-2015-5211", "reference_type": "", "scores": [], "url": "http://pivotal.io/security/cve-2015-5211" }, { "reference_url": "https://access.redhat.com/security/cve/cve-2015-5211", "reference_id": "CVE-2015-5211", "reference_type": "", "scores": [], "url": "https://access.redhat.com/security/cve/cve-2015-5211" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5211", "reference_id": "CVE-2015-5211", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5211" }, { "reference_url": "https://pivotal.io/security/cve-2015-5211", "reference_id": "CVE-2015-5211", "reference_type": "", "scores": [], "url": "https://pivotal.io/security/cve-2015-5211" }, { "reference_url": "https://github.com/advisories/GHSA-pgf9-h69p-pcgf", "reference_id": "GHSA-pgf9-h69p-pcgf", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pgf9-h69p-pcgf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52586?format=api", "purl": "pkg:maven/org.springframework/spring-web@3.2.15.RELEASE", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@3.2.15.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/52587?format=api", "purl": "pkg:maven/org.springframework/spring-web@4.1.8.RELEASE", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@4.1.8.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/52588?format=api", "purl": "pkg:maven/org.springframework/spring-web@4.2.2.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dbpx-y3bu-9ffg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@4.2.2.RELEASE" } ], "aliases": [ "CVE-2015-5211", "GHSA-pgf9-h69p-pcgf" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m3qs-d7va-vyhn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9776?format=api", "vulnerability_id": "VCID-rxkj-ex5j-k3g3", "summary": "", "references": [ { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162015.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162015.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162017.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162017.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-1592.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2016-1592.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-1593.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2016-1593.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-2035.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2016-2035.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-2036.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2016-2036.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1218", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1218" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1219", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1219" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3192", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01378", "scoring_system": "epss", "scoring_elements": "0.80573", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3192" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/0411435bac835de88a80a64b3f67b1b89244e907", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/0411435bac835de88a80a64b3f67b1b89244e907" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/38b8262e1e2db9be9d2171d81547da5c65ba7e09", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/38b8262e1e2db9be9d2171d81547da5c65ba7e09" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/5a711c05ec750f069235597173084c2ee796242", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/5a711c05ec750f069235597173084c2ee796242" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/5a711c05ec750f069235597173084c2ee7962424", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/5a711c05ec750f069235597173084c2ee7962424" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/9c3580d04e84d25a90ef4c249baee1b4e02df15e", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/9c3580d04e84d25a90ef4c249baee1b4e02df15e" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/d79ec68db40c381b8e205af52748ebd3163ee33b", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/d79ec68db40c381b8e205af52748ebd3163ee33b" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/e4651d6b50c5bc85c84ff537859c212ac4e33434", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/e4651d6b50c5bc85c84ff537859c212ac4e33434" }, { "reference_url": "https://github.com/spring-projects/spring-framework/issues/17727", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/issues/17727" }, { "reference_url": "https://github.com/spring-projects/spring-framework/issues/20352", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/issues/20352" }, { "reference_url": "https://jira.spring.io/browse/SPR-13136", "reference_id": "", "reference_type": "", "scores": [], "url": "https://jira.spring.io/browse/SPR-13136" }, { "reference_url": "https://jira.spring.io/browse/SPR-13136?redirect=false", "reference_id": "", "reference_type": "", "scores": [], "url": "https://jira.spring.io/browse/SPR-13136?redirect=false" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html" }, { "reference_url": "http://www.securityfocus.com/bid/90853", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/90853" }, { "reference_url": "http://www.securitytracker.com/id/1036587", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1036587" }, { "reference_url": "http://pivotal.io/security/cve-2015-3192", "reference_id": "CVE-2015-3192", "reference_type": "", "scores": [], "url": "http://pivotal.io/security/cve-2015-3192" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3192", "reference_id": "CVE-2015-3192", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3192" }, { "reference_url": "https://spring.io/security/cve-2015-3192", "reference_id": "CVE-2015-3192", "reference_type": "", "scores": [], "url": "https://spring.io/security/cve-2015-3192" }, { "reference_url": "https://github.com/advisories/GHSA-6v7w-535j-rq5m", "reference_id": "GHSA-6v7w-535j-rq5m", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6v7w-535j-rq5m" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/73979?format=api", "purl": "pkg:maven/org.springframework/spring-web@3.2.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@3.2.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/51758?format=api", "purl": "pkg:maven/org.springframework/spring-web@3.2.14.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-m3qs-d7va-vyhn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@3.2.14.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/73978?format=api", "purl": "pkg:maven/org.springframework/spring-web@4.1.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@4.1.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/51759?format=api", "purl": "pkg:maven/org.springframework/spring-web@4.1.7.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-m3qs-d7va-vyhn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@4.1.7.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/73976?format=api", "purl": "pkg:maven/org.springframework/spring-web@5.0.0.RC3", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.0.0.RC3" } ], "aliases": [ "CVE-2015-3192", "GHSA-6v7w-535j-rq5m" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rxkj-ex5j-k3g3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10016?format=api", "vulnerability_id": "VCID-sk9s-beg1-mybe", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0225", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00236", "scoring_system": "epss", "scoring_elements": "0.46626", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0225" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0225", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0225" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/44ee51a6c9c3734b3fcf9a20817117e86047d753", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/44ee51a6c9c3734b3fcf9a20817117e86047d753" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/8e096aeef55287dc829484996c9330cf755891a1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/8e096aeef55287dc829484996c9330cf755891a1" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/c6503ebbf7c9e21ff022c58706dbac5417b2b5eb", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/c6503ebbf7c9e21ff022c58706dbac5417b2b5eb" }, { "reference_url": "https://jira.spring.io/browse/SPR-11768", "reference_id": "", "reference_type": "", "scores": [], "url": "https://jira.spring.io/browse/SPR-11768" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0225", "reference_id": "CVE-2014-0225", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0225" }, { "reference_url": "https://pivotal.io/security/cve-2014-0225", "reference_id": "CVE-2014-0225", "reference_type": "", "scores": [], "url": "https://pivotal.io/security/cve-2014-0225" }, { "reference_url": "http://www.gopivotal.com/security/cve-2014-0225", "reference_id": "CVE-2014-0225", "reference_type": "", "scores": [], "url": "http://www.gopivotal.com/security/cve-2014-0225" }, { "reference_url": "https://github.com/advisories/GHSA-f93f-g33r-8pcp", "reference_id": "GHSA-f93f-g33r-8pcp", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f93f-g33r-8pcp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52567?format=api", "purl": "pkg:maven/org.springframework/spring-web@3.2.9.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-m3qs-d7va-vyhn" }, { "vulnerability": "VCID-rxkj-ex5j-k3g3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@3.2.9.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/52568?format=api", "purl": "pkg:maven/org.springframework/spring-web@4.0.5.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-m3qs-d7va-vyhn" }, { "vulnerability": "VCID-rxkj-ex5j-k3g3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@4.0.5.RELEASE" } ], "aliases": [ "CVE-2014-0225", "GHSA-f93f-g33r-8pcp" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sk9s-beg1-mybe" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10172?format=api", "vulnerability_id": "VCID-r8hw-nk7v-u7ga", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-7315", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00243", "scoring_system": "epss", "scoring_elements": "0.47766", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-7315" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7315", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7315" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4152", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4152" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7315", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7315" }, { "reference_url": "http://seclists.org/bugtraq/2013/Aug/154", "reference_id": "", "reference_type": "", "scores": [], "url": "http://seclists.org/bugtraq/2013/Aug/154" }, { "reference_url": "http://seclists.org/fulldisclosure/2013/Nov/14", "reference_id": "", "reference_type": "", "scores": [], "url": "http://seclists.org/fulldisclosure/2013/Nov/14" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/434735fbf6e7f9051af2ef027657edb99120b173", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/434735fbf6e7f9051af2ef027657edb99120b173" }, { "reference_url": "https://github.com/spring-projects/spring-framework/commit/7576274874deeccb6da6b09a8d5bd62e8b5538b7", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/commit/7576274874deeccb6da6b09a8d5bd62e8b5538b7" }, { "reference_url": "https://github.com/spring-projects/spring-framework/issues/15432", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/spring-projects/spring-framework/issues/15432" }, { "reference_url": "https://jira.spring.io/browse/SPR-10806?redirect=false", "reference_id": "", "reference_type": "", "scores": [], "url": "https://jira.spring.io/browse/SPR-10806?redirect=false" }, { "reference_url": "http://www.debian.org/security/2014/dsa-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.debian.org/security/2014/dsa-2842" }, { "reference_url": "http://www.securityfocus.com/bid/77998", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/77998" }, { "reference_url": "http://www.gopivotal.com/security/cve-2013-4152", "reference_id": "CVE-2013-4152", "reference_type": "", "scores": [], "url": "http://www.gopivotal.com/security/cve-2013-4152" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7315", "reference_id": "CVE-2013-7315", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-7315" }, { "reference_url": "https://github.com/advisories/GHSA-vp63-rrcm-9mph", "reference_id": "GHSA-vp63-rrcm-9mph", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vp63-rrcm-9mph" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/50616?format=api", "purl": "pkg:maven/org.springframework/spring-web@3.2.4.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-gzr8-crs2-8ygz" }, { "vulnerability": "VCID-m3qs-d7va-vyhn" }, { "vulnerability": "VCID-rxkj-ex5j-k3g3" }, { "vulnerability": "VCID-sk9s-beg1-mybe" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@3.2.4.RELEASE" }, { "url": "http://public2.vulnerablecode.io/api/packages/50617?format=api", "purl": "pkg:maven/org.springframework/spring-web@4.0.0.RELEASE", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-m3qs-d7va-vyhn" }, { "vulnerability": "VCID-rxkj-ex5j-k3g3" }, { "vulnerability": "VCID-sk9s-beg1-mybe" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@4.0.0.RELEASE" } ], "aliases": [ "CVE-2013-7315", "GHSA-vp63-rrcm-9mph" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r8hw-nk7v-u7ga" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@3.2.4.RELEASE" }