Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-beans@5.3.18
purl pkg:maven/org.springframework/spring-beans@5.3.18
Next non-vulnerable version 5.3.20
Latest non-vulnerable version 6.1.14
Risk score 3.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-hh26-6xwr-ggv7
Aliases:
CVE-2022-22970
Denial of service in Spring Framework In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications …
5.3.20
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-36p3-wjmg-h94x
Remote Code Execution in Spring Framework Spring Framework prior to versions 5.2.20 and 5.3.18 contains a remote code execution vulnerability … CVE-2022-22965
GMS-2022-558
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.springframework:spring-beans. CVE-2022-22965
GHSA-36p3-wjmg-h94x