Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@6.2.8
purl pkg:maven/org.springframework/spring-web@6.2.8
Next non-vulnerable version 6.2.19
Latest non-vulnerable version 7.0.8
Risk score 1.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-7m2p-62gw-p8qq
Aliases:
CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and …
7.0.8
Not vulnerable
6.2.19
Not vulnerable
6.2.19
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-6r3c-xf4w-jxjm
Spring Framework vulnerable to a reflected file download (RFD) ### Description In Spring Framework, versions 6.0.x as of 6.0.5, versions … CVE-2025-41234
CVE-2025-41234
Spring Framework vulnerable to a reflected file download (RFD) In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and … GHSA-6r3c-xf4w-jxjm