Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Arbitrary Code ExecutionCVE-2011-2732
Affects org.springframework.security:spring-security-web | Versions [3.0.0.RELEASE,3.0.6.RELEASE)
Has fix
MavenPublished 8 Sept 2014
  • C
Comparison of Object References Instead of Object ContentsCVE-2026-47841
Affects org.springframework.security:spring-security-webauthn | Versions [6.4.0,7.0.7)[7.1.0,7.1.1)
Has fix
MavenPublished 26 Aug 2026
  • M
Information ExposureCVE-2023-20866
Affects org.springframework.session:spring-session-core | Versions [3.0.0,3.0.1)
Has fix
MavenPublished 14 Apr 2023
  • H
Cross-site Request Forgery (CSRF)CVE-2015-5258
Affects org.springframework.social:spring-social-core | Versions [1.0.0.RELEASE,1.1.3.RELEASE)
Has fix
MavenPublished 10 Nov 2015
  • M
Arbitrary Code ExecutionCVE-2010-1622
Affects org.springframework:spring | Versions [2.5,2.5.6.SEC02)
Has fix
MavenPublished 18 Jun 2010
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59282
Affects org.springframework:spring-beans | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • H
Relative Path TraversalCVE-2025-41242
Affects org.springframework:spring-beans | Versions [,6.2.10)
Has fix
MavenPublished 19 Aug 2025
  • M
Denial of Service (DoS)CVE-2022-22970
Affects org.springframework:spring-beans | Versions [,5.2.22.RELEASE)[5.3.0,5.3.20)
Has fix
MavenPublished 12 May 2022
  • C
Remote Code Execution (RCE)CVE-2022-22965
Affects org.springframework:spring-beans | Versions [ ,5.2.20)[5.3.0, 5.3.18)
Has fix
MavenPublished 30 Mar 2022
  • M
Arbitrary Code ExecutionCVE-2010-1622
Affects org.springframework:spring-beans | Versions [2.5,2.5.6.SEC02)[3.0.0.RELEASE,3.0.3.RELEASE)
Has fix
MavenPublished 18 Jun 2010
  • L
Improper Handling of Case SensitivityCVE-2025-22233
Affects org.springframework:spring-context | Versions [6.1.0,6.1.20)[6.2.0,6.2.7)
Has fix
MavenPublished 16 May 2025
  • L
Improper Handling of Case SensitivityCVE-2024-38820
Affects org.springframework:spring-context | Versions [,6.1.14)
Has fix
MavenPublished 18 Oct 2024
  • L
Improper Handling of Case SensitivityCVE-2022-22968
Affects org.springframework:spring-context | Versions [,5.2.21)[5.3.0, 5.3.19)
Has fix
MavenPublished 14 Apr 2022
  • L
Denial of Service (DoS)
Affects org.springframework:spring-context | Versions [3.2.13.RELEASE,3.2.14.RELEASE)[4.1.6.RELEASE,4.1.7.RELEASE)
Has fix
MavenPublished 6 Nov 2015
  • H
Directory TraversalCVE-2026-59280
Affects org.springframework:spring-context-support | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Regular Expression Denial of Service (ReDoS)CVE-2026-41848
Affects org.springframework:spring-core | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-22745
Affects org.springframework:spring-core | Versions [,6.2.18)[7.0.0-M1,7.0.7)
Has fix
MavenPublished 21 Apr 2026
  • H
Incorrect AuthorizationCVE-2025-41249
Affects org.springframework:spring-core | Versions [,6.2.11)
Has fix
MavenPublished 17 Sept 2025
  • L
Improper Handling of Case SensitivityCVE-2024-38820
Affects org.springframework:spring-core | Versions [,6.1.14)
Has fix
MavenPublished 18 Oct 2024
  • H
Uncontrolled Resource Consumption ('Resource Exhaustion')CVE-2024-22233
Affects org.springframework:spring-core | Versions [6.0.15,6.0.16)[6.1.2,6.1.3)
Has fix
MavenPublished 22 Jan 2024
  • M
Improper Input ValidationCVE-2021-22060
Affects org.springframework:spring-core | Versions [,5.2.19.RELEASE)[5.3.0,5.3.14)
Has fix
MavenPublished 6 Jan 2022
  • M
Improper Output Neutralization for LogsCVE-2021-22096
Affects org.springframework:spring-core | Versions [5.3.0,5.3.12)[,5.2.18)
Has fix
MavenPublished 27 Oct 2021
  • H
Access Restriction BypassCVE-2018-1258
Affects org.springframework:spring-core | Versions [5.0.5.RELEASE, 5.0.6.RELEASE)
Has fix
MavenPublished 10 May 2018
  • M
Multipart Content PollutionCVE-2018-1272
Affects org.springframework:spring-core | Versions [4.3.0.RELEASE, 4.3.14.RELEASE)[5.0.0.RELEASE, 5.0.5.RELEASE)
Has fix
MavenPublished 9 Apr 2018
  • L
Denial of Service (DoS)
Affects org.springframework:spring-core | Versions [3.2.8.RELEASE,3.2.14.RELEASE)[4.1.0.RELEASE,4.1.7.RELEASE)
Has fix
MavenPublished 6 Nov 2015
  • M
Access Restriction BypassCVE-2011-2894
Affects org.springframework:spring-core | Versions [3.0.0.RELEASE,3.0.6.RELEASE)
Has fix
MavenPublished 8 Sept 2014
  • M
Directory TraversalCVE-2014-3578
Affects org.springframework:spring-core | Versions [3.0.0.RELEASE, 3.2.9.RELEASE)[4.0.0.RELEASE, 4.0.5.RELEASE)
Has fix
MavenPublished 5 Sept 2014
  • H
Expression Language InjectionCVE-2011-2730
Affects org.springframework:spring-core | Versions [2.0.0, 2.5.6.SEC03)[3.0.0, 3.0.6)
Has fix
MavenPublished 9 Sept 2011
  • M
Arbitrary Code ExecutionCVE-2010-1622
Affects org.springframework:spring-core | Versions [2.5.0,2.5.6.SEC01)[3.0.0,3.0.2.RELEASE)
Has fix
MavenPublished 18 Jun 2010
  • M
Regular Expression Denial of Service (ReDoS)CVE-2009-1190
Affects org.springframework:spring-core | Versions [,2.5.6.SEC01)
Has fix
MavenPublished 22 Apr 2009