Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-web@6.5.11
purl pkg:maven/org.springframework.security/spring-security-web@6.5.11
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-293q-567p-wmwq
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates In Spring Security Web, `SubjectDnX509PrincipalExtractor` does not correctly … CVE-2026-47838
GHSA-x2r2-rvhq-2mqv
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication … CVE-2026-41706