Search for packages
| purl | pkg:maven/org.springframework/spring-core@5.3.12 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-6gf2-pvqw-37ph
Aliases: CVE-2021-22060 |
Log entry injection in Spring Framework In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, … |
Vulnerable |
|
CVE-2022-22971
Aliases: GHSA-rqph-vqwm-22vc |
Allocation of Resources Without Limits or Throttling In spring framework versions prior to 5.3.20+, 5.2.22+ and old unsupported versions, application … |
Vulnerable Vulnerable |
|
CVE-2023-20861
Aliases: GHSA-564r-hj7v-mcr5 |
Spring Framework vulnerable to denial of service via specially crafted SpEL expression In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2022-22970
Aliases: GHSA-hh26-6xwr-ggv7 |
Allocation of Resources Without Limits or Throttling In spring framework versions prior to 5.3.20+, 5.2.22+ and old unsupported versions, applications … |
Vulnerable Vulnerable |
|
CVE-2022-22968
Aliases: GHSA-g5mm-vmx4-3rg7 |
Improper Handling of Case Sensitivity In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the … |
Vulnerable |
|
CVE-2022-22950
Aliases: GHSA-558x-2xjg-6232 |
Allocation of Resources Without Limits or Throttling in Spring Framework In Spring Framework versions 5.3.0 - 5.3.16 and older unsupported … |
Vulnerable Vulnerable |
|
CVE-2023-20863
Aliases: GHSA-wxqc-pxw9-g2p8 |
Spring Framework vulnerable to denial of service In spring framework versions prior to 5.2.24 release+,5.3.27+ and 6.0.8+, it is possible … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GMS-2022-559
Aliases: CVE-2022-22965 GHSA-36p3-wjmg-h94x |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.springframework:spring-core. |
Vulnerable Vulnerable |
|
GHSA-jmp9-x22r-554x
Aliases: CVE-2025-41249 |
Spring Framework annotation detection mechanism may result in improper authorization The Spring Framework annotation detection mechanism may not correctly resolve … |
Vulnerable |
|
GHSA-659m-px2c-25wj
Aliases: CVE-2026-41848 |
Spring Framework Denial of Service via AntPathMatcher Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack … |
Not vulnerable Not vulnerable |