Search for packages
| purl | pkg:maven/org.springframework/spring-expression@5.2.22.RELEASE |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-9cmq-m9j5-mvww
Aliases: CVE-2024-38808 |
Spring Framework vulnerable to Denial of Service In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is … |
Vulnerable |
|
GHSA-wxqc-pxw9-g2p8
Aliases: CVE-2023-20863 |
Spring Framework vulnerable to denial of service In Spring Framework versions prior to 5.2.24.release+ , 5.3.27+ and 6.0.8+ , it … |
Vulnerable |
|
GHSA-564r-hj7v-mcr5
Aliases: CVE-2023-20861 |
Spring Framework vulnerable to denial of service via specially crafted SpEL expression In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 … |
Vulnerable |
|
GHSA-775g-4xr8-78h8
Aliases: CVE-2026-41849 |
Spring Framework Denial of Service via Integer Overflow in SpEL Expressions An integer overflow vulnerability exists in the evaluation logic … | There are no reported fixed by versions. |
|
GHSA-9f52-rjqv-25qv
Aliases: CVE-2026-41852 |
Spring Framework Arbitrary Method Invocation in SpEL Expressions A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary … |
Not vulnerable Not vulnerable |
|
GHSA-r5w3-xv2f-j59q
Aliases: CVE-2026-41850 |
Spring Framework Algorithmic Denial of Service via SpEL Expressions Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable … |
Not vulnerable Not vulnerable |
|
GHSA-wxpp-56q6-5pcg
Aliases: CVE-2026-41851 |
Spring Framework Denial of Service via Unbounded Cache in SpEL Applications which accept user-supplied Spring Expression Language (SpEL) expressions may … |
Not vulnerable Not vulnerable |