Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-webmvc@5.2.20.RELEASE
purl pkg:maven/org.springframework/spring-webmvc@5.2.20.RELEASE
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cyjt-4vjn-mbc7 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.springframework.boot:spring-boot-starter-webflux. CVE-2022-22965
GHSA-36p3-wjmg-h94x
GMS-2022-558
GMS-2022-559
GMS-2022-560
GMS-2022-561
VCID-dy4t-tm9m-rfex Allocation of Resources Without Limits or Throttling in Spring Framework In Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a Denial of Service. CVE-2022-22950
GHSA-558x-2xjg-6232

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:44:04.810793+00:00 GitLab Importer Fixing VCID-dy4t-tm9m-rfex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2022-22950.yml 38.4.0
2026-04-16T21:43:59.355052+00:00 GitLab Importer Fixing VCID-cyjt-4vjn-mbc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2022-22965.yml 38.4.0
2026-04-11T22:59:41.904734+00:00 GitLab Importer Fixing VCID-dy4t-tm9m-rfex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2022-22950.yml 38.3.0
2026-04-11T22:59:36.088715+00:00 GitLab Importer Fixing VCID-cyjt-4vjn-mbc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2022-22965.yml 38.3.0
2026-04-02T23:08:21.704542+00:00 GitLab Importer Fixing VCID-dy4t-tm9m-rfex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2022-22950.yml 38.1.0
2026-04-02T23:08:16.985277+00:00 GitLab Importer Fixing VCID-cyjt-4vjn-mbc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2022-22965.yml 38.1.0
2026-04-01T16:00:13.958010+00:00 GHSA Importer Fixing VCID-cyjt-4vjn-mbc7 https://github.com/advisories/GHSA-36p3-wjmg-h94x 38.0.0
2026-04-01T13:06:52.382472+00:00 GithubOSV Importer Fixing VCID-cyjt-4vjn-mbc7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/03/GHSA-36p3-wjmg-h94x/GHSA-36p3-wjmg-h94x.json 38.0.0
2026-04-01T12:49:47.025784+00:00 GitLab Importer Fixing VCID-dy4t-tm9m-rfex https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2022-22950.yml 38.0.0
2026-04-01T12:49:46.586064+00:00 GitLab Importer Fixing VCID-cyjt-4vjn-mbc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.springframework/spring-webmvc/CVE-2022-22965.yml 38.0.0