Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-beans@4.3.29.RELEASE
purl pkg:maven/org.springframework/spring-beans@4.3.29.RELEASE
Next non-vulnerable version 5.2.22.RELEASE
Latest non-vulnerable version 6.1.14
Risk score 10.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-hh26-6xwr-ggv7
Aliases:
CVE-2022-22970
Denial of service in Spring Framework In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications …
5.2.22.RELEASE
Not vulnerable
GHSA-36p3-wjmg-h94x
Aliases:
CVE-2022-22965
Remote Code Execution in Spring Framework Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability …
5.2.20.RELEASE
Vulnerable
GMS-2022-558
Aliases:
CVE-2022-22965
GHSA-36p3-wjmg-h94x
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.springframework:spring-beans.
5.3.18
Vulnerable
5.3.18
Vulnerable
This package is not known to fix any advisories.