Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@6.0.23
purl pkg:maven/org.springframework/spring-web@6.0.23
Next non-vulnerable version 6.1.21
Latest non-vulnerable version 7.0.8
Risk score 3.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-6r3c-xf4w-jxjm
Aliases:
CVE-2025-41234
Spring Framework vulnerable to a reflected file download (RFD) ### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions … There are no reported fixed by versions.
GHSA-4gc7-5j7h-4qph
Aliases:
CVE-2024-38820
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-2rmj-mq67-h97g
Spring Framework DoS via conditional HTTP request ### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are … CVE-2024-38809