Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-core@3.0.0
purl pkg:maven/org.springframework/spring-core@3.0.0
Tags Ghost
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-rhcg-rwhx-qj3j
Aliases:
CVE-2014-3578
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework Directory traversal vulnerability in Pivotal Spring Framework 3.x … There are no reported fixed by versions.
GHSA-f866-m9mv-2xr3
Aliases:
CVE-2011-2894
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through … There are no reported fixed by versions.
GHSA-wv88-pf73-x22p
Aliases:
CVE-2011-2730
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x … There are no reported fixed by versions.
This package is not known to fix any advisories.