Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-core@6.0.7
purl pkg:maven/org.springframework/spring-core@6.0.7
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2023-20863
Aliases:
GHSA-wxqc-pxw9-g2p8
Spring Framework vulnerable to denial of service In spring framework versions prior to 5.2.24 release+,5.3.27+ and 6.0.8+, it is possible …
5.3.27
Vulnerable
6.0.8
Vulnerable
5.2.24.RELEASE
Vulnerable
5.3.27
Vulnerable
6.0.8
Vulnerable
5.2.24.RELEASE
Vulnerable
GHSA-jmp9-x22r-554x
Aliases:
CVE-2025-41249
Spring Framework annotation detection mechanism may result in improper authorization The Spring Framework annotation detection mechanism may not correctly resolve …
6.2.11
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2023-20861
Spring Framework vulnerable to denial of service via specially crafted SpEL expression In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 … GHSA-564r-hj7v-mcr5