Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo
cocoapods
Composer
Conan
Go
hex
Maven
npm
NuGet
pip
pub
RubyGems
Swift
Unmanaged (C/C++)
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
VULNERABILITY
AFFECTS
TYPE
PUBLISHED
M
Information Exposure
org.springframework.ldap:spring-ldap-core
[,2.4.4)
[3.2.0,3.2.8)
Maven
20 Nov 2024
H
Access Restriction Bypass
org.springframework.ldap:spring-ldap-core
[,2.3.2.RELEASE)
Maven
16 Nov 2017
M
Information Exposure
org.springframework.ldap:spring-ldap-odm
[,2.4.4)
[3.2.0,3.2.8)
Maven
20 Nov 2024
H
Denial of Service (DoS)
org.springframework.security.oauth:spring-security-oauth2
[0,2.5.2.RELEASE)
Maven
21 Apr 2022
M
Open Redirect
org.springframework.security.oauth:spring-security-oauth2
[2.3.0.RELEASE,2.3.6.RELEASE)
[2.2.0.RELEASE,2.2.5.RELEASE)
[2.1.0.RELEASE,2.1.5.RELEASE)
[2.0.0.RELEASE, 2.0.18.RELEASE)
Maven
30 May 2019
C
Credentials Disclosure
org.springframework.security.oauth:spring-security-oauth2
[2.3.0.RELEASE,2.3.5.RELEASE)
[2.2.0.RELEASE,2.2.4.RELEASE)
[2.1.0.RELEASE,2.1.4.RELEASE)
[,2.0.17.RELEASE)
Maven
8 Mar 2019
H
Privilege Escalation
org.springframework.security.oauth:spring-security-oauth2
[, 2.0.16.RELEASE)
[2.1.0.RELEASE, 2.1.3.RELEASE)
[2.2.0.RELEASE, 2.2.3.RELEASE)
[2.3.0.RELEASE, 2.3.4.RELEASE)
Maven
17 Oct 2018
C
Arbitrary Code Execution
org.springframework.security.oauth:spring-security-oauth2
[,2.0.15.RELEASE)
[2.1.0.RELEASE, 2.1.2.RELEASE)
[2.2.0.RELEASE, 2.2.2.RELEASE)
[2.3.0.RELEASE, 2.3.3.RELEASE)
Maven
10 May 2018
H
Arbitrary Code Execution
org.springframework.security.oauth:spring-security-oauth2
[1.0.0.RELEASE,2.0.10.RELEASE)
Maven
4 Jul 2016
M
Authorization Bypass
org.springframework.security:spring-security-cas
[,5.7.14)
[5.8.0,5.8.16)
[6.2.0,6.2.8)
[6.3.0,6.3.5)
Maven
20 Nov 2024
H
Authentication Bypass
org.springframework.security:spring-security-cas
[6.1.0,6.1.7)
[6.2.0,6.2.2)
Maven
20 Feb 2024
C
Access Restriction Bypass
org.springframework.security:spring-security-cas
[3.2.0,3.2.5.RELEASE)
[3.1.0,3.1.7.RELEASE)
Maven
25 Dec 2016
M
Authorization Bypass
org.springframework.security:spring-security-config
[,5.7.14)
[5.8.0,5.8.16)
[6.2.0,6.2.8)
[6.3.0,6.3.5)
Maven
20 Nov 2024
M
Missing Authorization
org.springframework.security:spring-security-config
[6.3.0,6.3.2)
Maven
20 Aug 2024
M
Incorrect Permission Assignment for Critical Resource
org.springframework.security:spring-security-config
[5.7.9,5.7.11)
[5.8.4,5.8.7)
[6.0.4,6.0.7)
[6.1.1,6.1.4)
Maven
19 Sept 2023
C
Access Control Bypass
org.springframework.security:spring-security-config
[5.6.0,5.6.12)
[5.7.0,5.7.10)
[5.8.0,5.8.5)
[6.0.0,6.0.5)
[6.1.0,6.1.2)
Maven
18 Jul 2023
H
Improper Authorization
org.springframework.security:spring-security-config
[5.8.0,5.8.5)
[6.0.0,6.0.5)
[6.1.0,6.1.2)
Maven
18 Jul 2023
M
Session Fixation
org.springframework.security:spring-security-config
[5.7.0,5.7.8)
[5.8.0,5.8.3)
[6.0.0,6.0.3)
Maven
20 Apr 2023
M
Access Restriction Bypass
org.springframework.security:spring-security-config
[4.1.0.RELEASE, 4.1.5.RELEASE)
[4.2.0.RELEASE, 4.2.4.RELEASE)
[5.0.0.RELEASE, 5.0.3.RELEASE)
Maven
17 Mar 2018
H
Authentication Bypass
org.springframework.security:spring-security-config
[3.2.0.RELEASE,4.1.1.RELEASE)
Maven
11 Jul 2016
C
Missing Authentication for Critical Function
org.springframework.security:spring-security-core
[6.4.0,6.4.6)
Maven
20 May 2025
M
Incorrect Authorization
org.springframework.security:spring-security-core
[6.4.0,6.4.4)
Maven
20 Mar 2025
M
Authorization Bypass
org.springframework.security:spring-security-core
[,5.7.14)
[5.8.0,5.8.16)
[6.2.0,6.2.8)
[6.3.0,6.3.5)
Maven
20 Nov 2024
H
Improper Access Control
org.springframework.security:spring-security-core
[,5.7.12)
[5.8.0,5.8.11)
[6.0.0,6.0.10)
[6.1.0,6.1.8)
[6.2.0,6.2.3)
Maven
18 Mar 2024
H
Authentication Bypass
org.springframework.security:spring-security-core
[6.1.0,6.1.7)
[6.2.0,6.2.2)
Maven
20 Feb 2024
M
Integer Overflow or Wraparound
org.springframework.security:spring-security-core
[3.1.0.RELEASE,5.4.11)
Maven
18 May 2022
M
Privilege Escalation
org.springframework.security:spring-security-core
[5.4.0, 5.4.4)
[5.3.0.RELEASE, 5.3.8.RELEASE)
[,5.2.9.RELEASE)
Maven
21 Feb 2021
M
Cryptographic Weakness
org.springframework.security:spring-security-core
[5.3.0.RELEASE, 5.3.2.RELEASE)
[5.2.0.RELEASE, 5.2.4.RELEASE)
[5.1.0.RELEASE, 5.1.10.RELEASE)
[5.0.0.RELEASE, 5.0.16.RELEASE)
[4.2.0.RELEASE, 4.2.16.RELEASE)
Maven
22 May 2020
H
Improper Authentication
org.springframework.security:spring-security-core
[4.2.0.RELEASE,4.2.13.RELEASE)
Maven
21 Jun 2019
L
Insecure Randomness
org.springframework.security:spring-security-core
[4.2.0.RELEASE, 4.2.12.RELEASE)
[5.0.0.RELEASE, 5.0.12.RELEASE)
[5.1.0.RELEASE, 5.1.5.RELEASE)
Maven
5 Apr 2019