Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Denial of Service (DoS)CVE-2024-38809
Affects org.springframework:spring-web | Versions [,5.3.38)[6.0.0, 6.0.23)[6.1.0, 6.1.12)
Has fix
MavenPublished 15 Aug 2024
  • M
Open RedirectCVE-2024-22262
Affects org.springframework:spring-web | Versions [,5.3.34)[6.0.0, 6.0.19)[6.1.0, 6.1.6)
Has fix
MavenPublished 12 Apr 2024
  • H
Open RedirectCVE-2024-22259
Affects org.springframework:spring-web | Versions [,5.3.33)[6.0.0, 6.0.18)[6.1.0, 6.1.5)
Has fix
MavenPublished 15 Mar 2024
  • H
Open RedirectCVE-2024-22243
Affects org.springframework:spring-web | Versions [,5.3.32)[6.0.0,6.0.17)[6.1.0,6.1.4)
Has fix
MavenPublished 22 Feb 2024
  • M
Denial of Service (DoS)CVE-2023-34053
Affects org.springframework:spring-web | Versions [6.0.0,6.0.14)
Has fix
MavenPublished 28 Nov 2023
  • M
Privilege EscalationCVE-2021-22118
Affects org.springframework:spring-web | Versions [5.3.0,5.3.7)[5.0.0.RELEASE,5.2.15.RELEASE)
Has fix
MavenPublished 26 May 2021
  • H
Improper Input ValidationCVE-2020-5421
Affects org.springframework:spring-web | Versions [3.2.0.RELEASE,4.3.29.RELEASE)[5.0.0.RELEASE, 5.0.19.RELEASE)[5.1.0.RELEASE, 5.1.18.RELEASE)[5.2.0.RELEASE, 5.2.9.RELEASE)
Has fix
MavenPublished 18 Sept 2020
  • H
Reflected File Download (RFD)CVE-2020-5398
Affects org.springframework:spring-web | Versions [5.2.0, 5.2.3)[5.1.0, 5.1.13)[5.0.0, 5.0.16)
Has fix
MavenPublished 22 Jan 2020
  • L
Denial of Service (DoS)CVE-2018-15756
Affects org.springframework:spring-web | Versions [4.2.0.RELEASE, 4.3.20.RELEASE)[5.0.0.RELEASE, 5.0.10.RELEASE)[5.1.0.RELEASE, 5.1.1.RELEASE)
Has fix
MavenPublished 18 Oct 2018
  • H
Reflected File DownloadCVE-2015-5211
Affects org.springframework:spring-web | Versions [3.2.0.RELEASE, 3.2.15.RELEASE)[4.0.0.RELEASE, 4.1.8.RELEASE)[4.2.0.RELEASE, 4.2.2.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
Denial of Service (DoS)CVE-2015-3192
Affects org.springframework:spring-web | Versions [3.2.0.RELEASE, 3.2.14.RELEASE)[4.0.0.RELEASE, 4.1.7.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • H
XML External Entity (XXE) InjectionCVE-2014-0225
Affects org.springframework:spring-web | Versions [3.0.0.RELEASE,3.2.9.RELEASE)[4.0.0.RELEASE,4.0.5.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
Information ExposureCVE-2018-11040
Affects org.springframework:spring-web | Versions [4.3.0.RELEASE,4.3.18.RELEASE)[5.0.0.RELEASE,5.0.7.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
Cross-Site Tracing (XST)CVE-2018-11039
Affects org.springframework:spring-web | Versions [4.3.0.RELEASE, 4.3.18.RELEASE)[5.0.0.RELEASE, 5.0.7.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • L
Cross-site Scripting (XSS)CVE-2013-6430
Affects org.springframework:spring-web | Versions [3.0.0.RELEASE, 3.2.2.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
XML External Entity (XXE) InjectionCVE-2013-6429
Affects org.springframework:spring-web | Versions [3.0.0.RELEASE,3.2.4.RELEASE)[4.0.0.RELEASE,4.0.1.RELEASE)
Has fix
MavenPublished 25 Dec 2016
  • M
XML External Entity (XXE) InjectionCVE-2013-4152
Affects org.springframework:spring-web | Versions [3,3.2.4)[4-alpha,4.0.0.M2)
Has fix
MavenPublished 25 Dec 2016
  • M
Cross-site Request Forgery (CSRF)CVE-2014-0054
Affects org.springframework:spring-web | Versions [3.0.0.RELEASE,3.2.8.RELEASE)[4.0.0.RELEASE,4.0.2.RELEASE)
Has fix
MavenPublished 6 Jun 2014
  • M
XML External Entity (XXE) InjectionCVE-2013-7315
Affects org.springframework:spring-web | Versions [3.0.0.RELEASE, 3.2.4.RELEASE)
Has fix
MavenPublished 22 Aug 2013
  • H
Expression Language InjectionCVE-2011-2730
Affects org.springframework:spring-web | Versions [,2.5.6.SEC03)[3.0.0.RELEASE,3.0.6.RELEASE)
Has fix
MavenPublished 9 Sept 2011
  • M
Incorrect AuthorizationCVE-2026-47892
Affects org.springframework:spring-webflux | Versions [5.2.5, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Allocation of Resources Without Limits or ThrottlingCVE-2026-47891
Affects org.springframework:spring-webflux | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • L
Information ExposureCVE-2026-47893
Affects org.springframework:spring-webflux | Versions [,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Open RedirectCVE-2026-47883
Affects org.springframework:spring-webflux | Versions [6.2.0,7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
Cross-site Scripting (XSS)CVE-2026-47890
Affects org.springframework:spring-webflux | Versions [6.2.0, 7.0.9)
Has fix
MavenPublished 26 Aug 2026
  • M
HTTP Request SmugglingCVE-2026-41853
Affects org.springframework:spring-webflux | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 27 Jul 2026
  • H
Missing Release of Memory after Effective LifetimeCVE-2026-41840
Affects org.springframework:spring-webflux | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 27 Jul 2026
  • M
Session FixationCVE-2026-41839
Affects org.springframework:spring-webflux | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 27 Jul 2026
  • M
Incorrect AuthorizationCVE-2026-41847
Affects org.springframework:spring-webflux | Versions [5.3.0,6.0.0)
Has fix
MavenPublished 9 Jun 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-41842
Affects org.springframework:spring-webflux | Versions [5.3.0,6.0.0)[6.1.0-M1,6.2.19)[7.0.0-M1,7.0.8)
Has fix
MavenPublished 9 Jun 2026