Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-expression@6.0.2
purl pkg:maven/org.springframework/spring-expression@6.0.2
Next non-vulnerable version 6.0.8
Latest non-vulnerable version 7.0.8
Risk score 3.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-wxqc-pxw9-g2p8
Aliases:
CVE-2023-20863
Spring Framework vulnerable to denial of service In Spring Framework versions prior to 5.2.24.release+ , 5.3.27+ and 6.0.8+ , it …
6.0.8
Not vulnerable
GHSA-564r-hj7v-mcr5
Aliases:
CVE-2023-20861
Spring Framework vulnerable to denial of service via specially crafted SpEL expression In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 …
6.0.7
Vulnerable
This package is not known to fix any advisories.