Search for packages
| purl | pkg:maven/org.springframework.security/spring-security-web@3.1.4.RELEASE |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-gq28-h5vg-8prx
Aliases: CVE-2021-22112 |
Privilege escalation in spring security Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and … | There are no reported fixed by versions. |
|
GHSA-hh32-7344-cg2f
Aliases: CVE-2022-22978 |
Authorization bypass in Spring Security In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be … |
Vulnerable |
|
GHSA-mf92-479x-3373
Aliases: CVE-2026-22732 |
Spring Security HTTP Headers Are not Written Under Some Conditions When applications specify HTTP response headers for servlet applications using … | There are no reported fixed by versions. |
|
CVE-2021-22112
Aliases: GHSA-gq28-h5vg-8prx |
Privilege escalation in spring security Spring Security 5.4.x to 5.4.3, 5.3.x to 5.3.8.RELEASE, 5.2.x to 5.2.8.RELEASE, and older unsupported versions … |
Vulnerable |
|
GHSA-293q-567p-wmwq
Aliases: CVE-2026-47838 |
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates In Spring Security Web, `SubjectDnX509PrincipalExtractor` does not correctly … |
Not vulnerable |
|
GHSA-x2r2-rvhq-2mqv
Aliases: CVE-2026-41706 |
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication … |
Not vulnerable Not vulnerable |