Search for packages
| purl | pkg:maven/org.springframework/spring-webmvc@6.0.11 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-r936-gwx5-v52f
Aliases: CVE-2025-41242 |
Spring Framework MVC Applications Path Traversal Vulnerability Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when … | There are no reported fixed by versions. |
|
GHSA-cx7f-g6mp-7hqm
Aliases: CVE-2024-38816 |
Path traversal vulnerability in functional web frameworks Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are … | There are no reported fixed by versions. |
|
GHSA-v94h-hvhg-mf9h
Aliases: CVE-2023-34053 |
Spring Framework vulnerable to denial of service In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user … |
Vulnerable |
|
GHSA-6hcq-hmm3-jj3c
Aliases: CVE-2026-22735 |
Spring MVC and WebFlux has Server Sent Event stream corruption Spring MVC and WebFlux applications are vulnerable to stream corruption … | There are no reported fixed by versions. |
|
GHSA-4773-3jfm-qmx3
Aliases: CVE-2026-22737 |
Spring Framework Improper Path Limitation with Script View Templates Use of Java scripting engine enabled (e.g. JRuby, Jython) template views … | There are no reported fixed by versions. |
|
GHSA-g5vr-rgqm-vf78
Aliases: CVE-2024-38819 |
Spring Framework Path Traversal vulnerability Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to … | There are no reported fixed by versions. |
|
GHSA-pc63-qcmh-9cmg
Aliases: CVE-2026-47884 |
Spring Framework Improper Path Limitation in XsltView Use of XsltView in a Spring MVC application can result in SSRF and … | There are no reported fixed by versions. |
|
CVE-2026-47884
Aliases: GHSA-pc63-qcmh-9cmg |
Spring Framework Improper Path Limitation in XsltView Use of XsltView in a Spring MVC application can result in SSRF and … |
Not vulnerable |