Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-core@4.0.0
purl pkg:maven/org.springframework/spring-core@4.0.0
Tags Ghost
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-rhcg-rwhx-qj3j
Aliases:
CVE-2014-3578
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework Directory traversal vulnerability in Pivotal Spring Framework 3.x … There are no reported fixed by versions.
GHSA-pgf9-h69p-pcgf
Aliases:
CVE-2015-5211
Files or Directories Accessible to External Parties in org.springframework:spring-core Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to … There are no reported fixed by versions.
CVE-2015-3192
Aliases:
GHSA-6v7w-535j-rq5m
Improper Restriction of Operations within the Bounds of a Memory Buffer Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 … There are no reported fixed by versions.
This package is not known to fix any advisories.