VulnerableCode Package Details - pkg:maven/org.springframework.security/spring-security-core@6.0.2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/org.springframework.security/spring-security-core@6.0.2

purl	pkg:maven/org.springframework.security/spring-security-core@6.0.2

Next non-vulnerable version	6.2.8
Latest non-vulnerable version	7.0.5
Risk score	3.7

Vulnerabilities affecting this package (5)

Advisory	Summary	Fixed in package version
GHSA-q3v6-hm2v-pw99 Aliases: CVE-2024-38827	Spring Framework has Authorization Bypass for Case Sensitive Comparisons The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions …	There are no reported fixed by versions.
GHSA-f3jh-qvm4-mg39 Aliases: CVE-2024-22257	Erroneous authentication pass in Spring Security In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x …	6.1.8 Vulnerable
GHSA-x873-6rgc-94jc Aliases: CVE-2023-20862	Spring Security logout not clearing security context In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, …	6.0.3 Vulnerable
CVE-2023-34034	Improper Handling of Inconsistent Structural Elements Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch …	5.6.12 Vulnerable 5.7.10 Vulnerable 5.8.5 Vulnerable 6.0.5 Vulnerable 6.1.2 Vulnerable
CVE-2023-34035	Incorrect Authorization Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be …	5.8.5 Vulnerable 6.0.5 Vulnerable 6.1.2 Vulnerable

This package is not known to fix any advisories.