Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-core@5.2.23.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.23.RELEASE
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score 1.6
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2023-20863
Aliases:
GHSA-wxqc-pxw9-g2p8
Spring Framework vulnerable to denial of service In spring framework versions prior to 5.2.24 release+,5.3.27+ and 6.0.8+, it is possible …
5.3.27
Vulnerable
6.0.8
Vulnerable
5.2.24.RELEASE
Vulnerable
5.3.27
Vulnerable
6.0.8
Vulnerable
5.2.24.RELEASE
Vulnerable
GHSA-659m-px2c-25wj
Aliases:
CVE-2026-41848
Spring Framework Denial of Service via AntPathMatcher Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack …
7.0.8
Not vulnerable
6.2.19
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2023-20861
Spring Framework vulnerable to denial of service via specially crafted SpEL expression In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 … GHSA-564r-hj7v-mcr5