Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@6.2.3
purl pkg:maven/org.springframework/spring-web@6.2.3
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score 3.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-6r3c-xf4w-jxjm
Aliases:
CVE-2025-41234
Spring Framework vulnerable to a reflected file download (RFD) ### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions …
6.2.8
Vulnerable
GHSA-7m2p-62gw-p8qq
Aliases:
CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and …
7.0.8
Not vulnerable
6.2.19
Not vulnerable
6.2.19
Not vulnerable
This package is not known to fix any advisories.