Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@3.2-alpha0
purl pkg:maven/org.springframework/spring-web@3.2-alpha0
Tags Ghost
Next non-vulnerable version 6.1.21
Latest non-vulnerable version 7.0.8
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2015-5211

Reflected file download vulnerability Under some situations, this package is vulnerable to a Reflected File Download (RFD) attack. The attack …
4.1.8.RELEASE
Vulnerable
4.2.2.RELEASE
Vulnerable
3.2.15.RELEASE
Vulnerable
CVE-2015-3192

DoS Attack with XML Input This package do not properly process inline DTD declarations when DTD is not entirely disabled, …
4.1.7.RELEASE
Vulnerable
3.2.14.RELEASE
Vulnerable
This package is not known to fix any advisories.