Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework/spring-webmvc@5.3.47
purl pkg:maven/org.springframework/spring-webmvc@5.3.47
Tags Ghost
Next non-vulnerable version 7.0.9
Latest non-vulnerable version 7.0.9
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-wg35-8jpf-2xv3
Aliases:
CVE-2026-22741
Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be … There are no reported fixed by versions.
GHSA-6p4f-wcwh-5vvm
Aliases:
CVE-2026-22745
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application … There are no reported fixed by versions.
This package is not known to fix any advisories.