Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-core@5.2.22.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.22.RELEASE
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score 1.6
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2023-20861
Aliases:
GHSA-564r-hj7v-mcr5
Spring Framework vulnerable to denial of service via specially crafted SpEL expression In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 …
5.3.26
Vulnerable
6.0.7
Vulnerable
5.2.23.RELEASE
Vulnerable
CVE-2023-20863
Aliases:
GHSA-wxqc-pxw9-g2p8
Spring Framework vulnerable to denial of service In spring framework versions prior to 5.2.24 release+,5.3.27+ and 6.0.8+, it is possible …
5.3.27
Vulnerable
6.0.8
Vulnerable
5.2.24.RELEASE
Vulnerable
5.3.27
Vulnerable
6.0.8
Vulnerable
5.2.24.RELEASE
Vulnerable
GHSA-659m-px2c-25wj
Aliases:
CVE-2026-41848
Spring Framework Denial of Service via AntPathMatcher Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack …
7.0.8
Not vulnerable
6.2.19
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2022-22971
Allocation of Resources Without Limits or Throttling In spring framework versions prior to 5.3.20+, 5.2.22+ and old unsupported versions, application … GHSA-rqph-vqwm-22vc
CVE-2022-22970
Allocation of Resources Without Limits or Throttling In spring framework versions prior to 5.3.20+, 5.2.22+ and old unsupported versions, applications … GHSA-hh26-6xwr-ggv7