Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-core@3.0-alpha0
purl pkg:maven/org.springframework/spring-core@3.0-alpha0
Tags Ghost
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2010-1622

Remote classloader modification This package allows remote attackers to execute arbitrary code via an HTTP request containing `class.classLoader.URLs[0]=jar:` followed by …
2.5.6.SEC02
Vulnerable
3.0.3.RELEASE
Vulnerable
CVE-2009-1190

Regular expression denial of service (ReDOS) Algorithmic complexity vulnerability in this package allows remote attackers to cause a denial of …
3.0.1.RELEASE
Vulnerable
2.5.6.SEC01
Vulnerable
CVE-2011-2730

EL expressions double evaluation When a container supports Expression Language (EL), this package evaluates EL expressions in tags twice, which …
3.0.6.RELEASE
Vulnerable
2.5.6.SEC03
Vulnerable
This package is not known to fix any advisories.