Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-core@5.0.0.M2
purl pkg:maven/org.springframework.security/spring-security-core@5.0.0.M2
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2017-4995
Deserialization of Untrusted Data When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary …
GHSA-vhrg-v3cv-p247
Deserialization of Untrusted Data in Spring Security An issue was discovered in Pivotal Spring Security 4.2.0.RELEASE through 4.2.2.RELEASE, and Spring … CVE-2017-4995