org.springframework.security:spring-security-web

Licenses: Apache-2.0

Direct Vulnerabilities

Known vulnerabilities in the org.springframework.security:spring-security-web package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
Use of Cache Containing Sensitive Information

[3.2.8,6.5.9)[7.0.0-M1,7.0.4)
  • M
Authorization Bypass

[,5.7.14)[5.8.0,5.8.16)[6.2.0,6.2.8)[6.3.0,6.3.5)
  • C
Missing Authorization

[,5.7.13)[5.8.0,5.8.15)[6.0.0,6.2.7)[6.3.0,6.3.4)
  • H
Authentication Bypass

[6.1.0,6.1.7)[6.2.0,6.2.2)
  • M
Session Fixation

[5.7.0,5.7.8)[5.8.0,5.8.3)[6.0.0,6.0.3)
  • H
Authorization Bypass

[5.6.0,5.6.9)[5.7.0,5.7.5)
  • H
Authorization Bypass

[,5.4.11)[5.5.0,5.5.7)[5.6.0,5.6.4)
  • L
Timing Attack

[,5.2.9.RELEASE)[5.3.0,5.3.7)[5.4.0,5.4.3)
  • M
Access Restriction Bypass

[4.1.0.RELEASE,4.1.5.RELEASE)[4.2.0.RELEASE,4.2.4.RELEASE)[5.0.0.RELEASE,5.0.3.RELEASE)
  • H
Security Bypass

[3.2.0.RELEASE,3.2.10.RELEASE)[4.0.0.RELEASE,4.1.4.RELEASE)[4.2.0.RELEASE,4.2.1.RELEASE)
  • H
Authentication Bypass

[3.2.0.RELEASE,4.1.1.RELEASE)
  • M
Access Restriction Bypass

[3.0.0.RELEASE,3.0.4.RELEASE)
  • M
Arbitrary Code Execution

[3.0.0.RELEASE,3.0.6.RELEASE)

Package versions

267 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
7.1.0-M316 Mar, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.1.0-M213 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.1.0-M119 Jan, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.416 Mar, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.313 Feb, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.215 Dec, 2025
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.115 Dec, 2025
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.017 Nov, 2025
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.0-RC36 Nov, 2025
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
7.0.0-RC24 Nov, 2025
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L