Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-context@2.5.2
purl pkg:maven/org.springframework/spring-context@2.5.2
Next non-vulnerable version 6.1.20
Latest non-vulnerable version 6.2.7
Risk score 3.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-g5mm-vmx4-3rg7
Aliases:
CVE-2022-22968
Improper handling of case sensitivity in Spring Framework In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older …
5.2.21.RELEASE
Vulnerable
GHSA-4gc7-5j7h-4qph
Aliases:
CVE-2024-38820
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … There are no reported fixed by versions.
CVE-2022-22968
Aliases:
GHSA-g5mm-vmx4-3rg7
Improper Handling of Case Sensitivity In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the …
5.3.19
Vulnerable
5.3.19
Vulnerable
GHSA-4wp7-92pw-q264
Aliases:
CVE-2025-22233
Spring Framework DataBinder Case Sensitive Match Exception CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for …
6.2.7
Not vulnerable
6.1.20
Not vulnerable
This package is not known to fix any advisories.