Search for packages
| purl | pkg:maven/org.springframework/spring-messaging@4.0.0.RELEASE |
| Next non-vulnerable version | 5.2.22.RELEASE |
| Latest non-vulnerable version | 5.3.20 |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-rqph-vqwm-22vc
Aliases: CVE-2022-22971 |
Allocation of Resources Without Limits or Throttling in Spring Framework In spring framework versions prior to 5.3.20+ , 5.2.22+ and … |
Not vulnerable |
|
CVE-2020-5421
|
Remote file disclosure In Spring Framework the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-3rmv-2pg5-xvqj
Aliases: CVE-2018-1275 |
Spring Framework has Improperly Implemented Security Check for Standard Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior … |
Vulnerable Vulnerable |
|
GHSA-p5hg-3xm3-gcjg
Aliases: CVE-2018-1270 |
Spring Framework allows applications to expose STOMP over WebSocket endpoints Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 … |
Vulnerable Vulnerable |