Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-messaging@5.1.14.RELEASE
purl pkg:maven/org.springframework/spring-messaging@5.1.14.RELEASE
Next non-vulnerable version 5.2.22.RELEASE
Latest non-vulnerable version 5.3.20
Risk score 3.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-rqph-vqwm-22vc
Aliases:
CVE-2022-22971
Allocation of Resources Without Limits or Throttling in Spring Framework In spring framework versions prior to 5.3.20+ , 5.2.22+ and …
5.2.22.RELEASE
Not vulnerable
CVE-2020-5421

Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser …
5.1.18.RELEASE
Vulnerable
4.3.29.RELEASE
Vulnerable
5.2.9.RELEASE
Vulnerable
5.0.19.RELEASE
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2018-1270
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to …
CVE-2018-1257
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose …