Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@5.3.39
purl pkg:maven/org.springframework/spring-web@5.3.39
Next non-vulnerable version 6.1.21
Latest non-vulnerable version 7.0.8
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-4wrc-f8pq-fpqp
Aliases:
CVE-2016-1000027
Pivotal Spring Framework contains unsafe Java deserialization methods Pivotal Spring Framework before 6.0.0 suffers from a potential remote code execution …
6.0.0
Vulnerable
GHSA-4gc7-5j7h-4qph
Aliases:
CVE-2024-38820
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … There are no reported fixed by versions.
This package is not known to fix any advisories.