Search for packages
| purl | pkg:maven/org.springframework.security/spring-security-web@4.0.3.RELEASE |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2016-9879
|
An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Security does … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-gq28-h5vg-8prx
Aliases: CVE-2021-22112 |
Privilege escalation in spring security Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and … | There are no reported fixed by versions. |
|
GHSA-hh32-7344-cg2f
Aliases: CVE-2022-22978 |
Authorization bypass in Spring Security In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be … |
Vulnerable |
|
GHSA-mf92-479x-3373
Aliases: CVE-2026-22732 |
Spring Security HTTP Headers Are not Written Under Some Conditions When applications specify HTTP response headers for servlet applications using … | There are no reported fixed by versions. |
|
CVE-2021-22112
Aliases: GHSA-gq28-h5vg-8prx |
Privilege escalation in spring security Spring Security 5.4.x to 5.4.3, 5.3.x to 5.3.8.RELEASE, 5.2.x to 5.2.8.RELEASE, and older unsupported versions … |
Vulnerable |
|
GHSA-293q-567p-wmwq
Aliases: CVE-2026-47838 |
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates In Spring Security Web, `SubjectDnX509PrincipalExtractor` does not correctly … |
Not vulnerable |
|
GHSA-x2r2-rvhq-2mqv
Aliases: CVE-2026-41706 |
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication … |
Not vulnerable Not vulnerable |