Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-web@7.0.2
purl pkg:maven/org.springframework/spring-web@7.0.2
Next non-vulnerable version 7.0.8
Latest non-vulnerable version 7.0.8
Risk score 1.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-7m2p-62gw-p8qq
Aliases:
CVE-2026-41854
Spring Framework Server-Side Request Forgery via UriComponentsBuilder Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and …
7.0.8
Not vulnerable
7.0.8
Not vulnerable
This package is not known to fix any advisories.