Search for packages
| purl | pkg:maven/org.springframework/spring-expression@4.3.27.RELEASE |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-558x-2xjg-6232
Aliases: CVE-2022-22950 |
Allocation of Resources Without Limits or Throttling in Spring Framework In Spring Framework versions 5.3.0 - 5.3.16, 5.2.0.RELEASE - 5.2.19.RELEASE, … |
Vulnerable |
|
GHSA-9cmq-m9j5-mvww
Aliases: CVE-2024-38808 |
Spring Framework vulnerable to Denial of Service In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is … |
Vulnerable |
|
GHSA-wxqc-pxw9-g2p8
Aliases: CVE-2023-20863 |
Spring Framework vulnerable to denial of service In Spring Framework versions prior to 5.2.24.release+ , 5.3.27+ and 6.0.8+ , it … |
Vulnerable |
|
GHSA-564r-hj7v-mcr5
Aliases: CVE-2023-20861 |
Spring Framework vulnerable to denial of service via specially crafted SpEL expression In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 … |
Vulnerable |
|
CVE-2022-22950
Aliases: GHSA-558x-2xjg-6232 |
Allocation of Resources Without Limits or Throttling n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is … |
Vulnerable Vulnerable |
|
GHSA-775g-4xr8-78h8
Aliases: CVE-2026-41849 |
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions An integer overflow vulnerability exists in the evaluation logic … | There are no reported fixed by versions. |
|
GHSA-9f52-rjqv-25qv
Aliases: CVE-2026-41852 |
Spring Framework Arbitrary Method Invocation in SpEL Expressions A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary … |
Not vulnerable Not vulnerable |
|
GHSA-r5w3-xv2f-j59q
Aliases: CVE-2026-41850 |
Spring Framework Algorithmic Denial of Service via SpEL Expressions Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable … |
Not vulnerable Not vulnerable |
|
GHSA-wxpp-56q6-5pcg
Aliases: CVE-2026-41851 |
Spring Framework Denial of Service via Unbounded Cache in SpEL Applications which accept user-supplied Spring Expression Language (SpEL) expressions may … |
Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2018-1270
|
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to … | |
|
CVE-2018-1275
|
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to … |