Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-context@6.1.14
purl pkg:maven/org.springframework/spring-context@6.1.14
Next non-vulnerable version 6.1.20
Latest non-vulnerable version 6.2.7
Risk score 1.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-4wp7-92pw-q264
Aliases:
CVE-2025-22233
Spring Framework DataBinder Case Sensitive Match Exception CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for …
6.2.7
Not vulnerable
6.1.20
Not vulnerable
6.1.20
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
GHSA-4gc7-5j7h-4qph
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … CVE-2024-38820
CVE-2024-38827
This advisory has been marked as False-Positive and removed The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions … GHSA-q3v6-hm2v-pw99
CVE-2024-38820
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … GHSA-4gc7-5j7h-4qph