Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-core@5.2.0
purl pkg:maven/org.springframework/spring-core@5.2.0
Tags Ghost
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score 1.9
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-6gf2-pvqw-37ph
Aliases:
CVE-2021-22060
Log entry injection in Spring Framework In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, … There are no reported fixed by versions.
CVE-2020-5421

Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser …
5.1.18.RELEASE
Vulnerable
5.0.19.RELEASE
Vulnerable
4.3.29.RELEASE
Vulnerable
5.2.9.RELEASE
Vulnerable
CVE-2022-22950
Aliases:
GHSA-558x-2xjg-6232
Allocation of Resources Without Limits or Throttling in Spring Framework In Spring Framework versions 5.3.0 - 5.3.16 and older unsupported …
5.3.17
Vulnerable
5.2.20.RELEASE
Vulnerable
CVE-2021-22118
Aliases:
GHSA-gfwj-fwqj-fp3v
Improper Privilege Management In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application …
5.3.7
Vulnerable
5.3.7
Vulnerable
GHSA-rfmp-97jj-h8m6
Aliases:
CVE-2021-22096
Improper Output Neutralization for Logs in Spring Framework In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older … There are no reported fixed by versions.
This package is not known to fix any advisories.