Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-web@5.3.0
purl pkg:maven/org.springframework.security/spring-security-web@5.3.0
Tags Ghost
Next non-vulnerable version 6.5.11
Latest non-vulnerable version 7.0.6
Risk score 4.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-gq28-h5vg-8prx
Aliases:
CVE-2021-22112
Privilege escalation in spring security Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and … There are no reported fixed by versions.
CVE-2021-22112
Aliases:
GHSA-gq28-h5vg-8prx
Privilege escalation in spring security Spring Security 5.4.x to 5.4.3, 5.3.x to 5.3.8.RELEASE, 5.2.x to 5.2.8.RELEASE, and older unsupported versions …
5.4.4
Vulnerable
This package is not known to fix any advisories.