Search for packages
| purl | pkg:maven/org.springframework/spring-expression@4.0.9.RELEASE |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-1270
|
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2018-1275
|
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-558x-2xjg-6232
Aliases: CVE-2022-22950 |
Allocation of Resources Without Limits or Throttling in Spring Framework In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, … |
Vulnerable |
|
GHSA-9cmq-m9j5-mvww
Aliases: CVE-2024-38808 |
Spring Framework vulnerable to Denial of Service In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is … |
Vulnerable |
|
GHSA-wxqc-pxw9-g2p8
Aliases: CVE-2023-20863 |
Spring Framework vulnerable to denial of service In Spring Framework versions prior to 5.2.24.release+ , 5.3.27+ and 6.0.8+ , it … |
Vulnerable |
|
GHSA-564r-hj7v-mcr5
Aliases: CVE-2023-20861 |
Spring Framework vulnerable to denial of service via specially crafted SpEL expression In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 … |
Vulnerable |
|
CVE-2022-22950
Aliases: GHSA-558x-2xjg-6232 |
Allocation of Resources Without Limits or Throttling n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is … |
Vulnerable Vulnerable |
|
GHSA-775g-4xr8-78h8
Aliases: CVE-2026-41849 |
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions An integer overflow vulnerability exists in the evaluation logic … | There are no reported fixed by versions. |
|
GHSA-9f52-rjqv-25qv
Aliases: CVE-2026-41852 |
Spring Framework Arbitrary Method Invocation in SpEL Expressions A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary … |
Not vulnerable Not vulnerable |
|
GHSA-r5w3-xv2f-j59q
Aliases: CVE-2026-41850 |
Spring Framework Algorithmic Denial of Service via SpEL Expressions Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable … |
Not vulnerable Not vulnerable |
|
GHSA-wxpp-56q6-5pcg
Aliases: CVE-2026-41851 |
Spring Framework Denial of Service via Unbounded Cache in SpEL Applications which accept user-supplied Spring Expression Language (SpEL) expressions may … |
Not vulnerable Not vulnerable |