Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-core@4.2.12
purl pkg:maven/org.springframework.security/spring-security-core@4.2.12
Tags Ghost
Next non-vulnerable version 6.2.8
Latest non-vulnerable version 7.0.5
Risk score 3.3
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-v33x-prhc-gph5
Aliases:
CVE-2019-11272
Insufficiently Protected Credentials and Improper Authentication in Spring Security Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-v2r2-7qm7-jj6v
Spring Security uses insufficiently random values Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior … CVE-2019-3795