Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@6.1.14
purl pkg:maven/org.springframework/spring-web@6.1.14
Next non-vulnerable version 6.1.21
Latest non-vulnerable version 7.0.8
Risk score 3.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-6r3c-xf4w-jxjm
Aliases:
CVE-2025-41234
Spring Framework vulnerable to a reflected file download (RFD) ### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions …
6.1.21
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-4gc7-5j7h-4qph
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … CVE-2024-38820
CVE-2024-38820
Spring Framework DataBinder Case Sensitive Match Exception The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() … GHSA-4gc7-5j7h-4qph