Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.security/spring-security-web@7.0.3
purl pkg:maven/org.springframework.security/spring-security-web@7.0.3
Next non-vulnerable version 7.0.6
Latest non-vulnerable version 7.0.6
Risk score 4.1
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-mf92-479x-3373
Aliases:
CVE-2026-22732
Spring Security HTTP Headers Are not Written Under Some Conditions When applications specify HTTP response headers for servlet applications using …
7.0.4
Vulnerable
GHSA-2jrg-rf5x-568g
Aliases:
CVE-2026-22747
Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not …
7.0.5
Vulnerable
7.0.5
Vulnerable
GHSA-x2r2-rvhq-2mqv
Aliases:
CVE-2026-41706
Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication …
7.0.6
Not vulnerable
7.0.6
Not vulnerable
This package is not known to fix any advisories.