`org.springframework.security:spring-security-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework.security:spring-security-core

Total PRs:
291 Dependabot PRs

Latest PR:
11 days ago

Unique Repositories:
130 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Spring Security uses insufficiently random values

GHSA-v2r2-7qm7-jj6v CVE-2019-3795 MODERATE published about 7 years ago • updated 32 minutes ago

Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when u...

Spring Security and Spring Framework may not recognize certain paths that should be protected

GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 2 days ago

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...

Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider

GHSA-vxf7-qj7q-83fh CVE-2026-22746 LOW published about 2 months ago • updated about 2 hours ago

Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user at...

Spring Security logout not clearing security context

GHSA-x873-6rgc-94jc CVE-2023-20862 MODERATE published about 3 years ago • updated 1 day ago

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not pr...

Integer overflow in BCrypt class in Spring Security

GHSA-wx54-3278-m5g4 CVE-2022-22976 MODERATE published about 4 years ago • updated 2 days ago

Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. Wh...

View all 30 advisories

Recent PRs

RSS Feed

chore(deps): bump org.springframework.security:spring-security-core from 5.7.5 to 5.7.14

virtualidentityag/digisucht-onlineBeratung-uploadService #2

5.7.5 → 5.7.14 Patch PR

Open about 1 year ago

chore(deps): bump org.springframework.security:spring-security-core from 5.7.5 to 5.7.14

virtualidentityag/digisucht-onlineBeratung-liveService #2

5.7.5 → 5.7.14 Patch PR

Open about 1 year ago

build(deps): bump org.springframework.security:spring-security-core from 6.0.5 to 6.2.8

virtualidentityag/digisucht-onlineBeratung-agencyService #2

6.0.5 → 6.2.8 Minor PR

Open about 1 year ago

Gradle(deps): Bump org.springframework.security:spring-security-core from 6.4.6 to 6.5.0 in /maat-orchestration

ministryofjustice/laa-maat-orchestration #268

6.4.6 → 6.5.0 Minor PR

Closed about 1 year ago 2 comments

Bump the gradle-updates group across 1 directory with 3 updates

ministryofjustice/laa-ccms-soa-gateway-api #200

6.4.6 → 6.5.0 Minor PR

Open about 1 year ago 1 comment

deps(deps): bump the gradle group with 2 updates

bilalobe/ProjectHub #138

6.4.3 → 6.5.0 Minor PR

Open about 1 year ago

Bump the maven group across 2 directories with 2 updates

offsoc/jeepay #2

5.4.7 → 5.7.14 Minor PR

Open about 1 year ago

Bump the maven group across 2 directories with 12 updates

vitolothomas1986/ORCID-Source #1

5.6.2 → 5.7.14 Minor PR

Open about 1 year ago

Bump the maven group across 2 directories with 12 updates

Alvin80Bcn/ORCID-Source #1

5.6.2 → 5.7.14 Minor PR

Open about 1 year ago 1 comment

Bump the maven group across 2 directories with 12 updates

Rucellmai61/ORCID-Source #1

5.6.2 → 5.7.14 Minor PR

Open about 1 year ago

Bump the spring group with 16 updates

DSpace/DSpace #10798

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

Bump the maven group across 1 directory with 6 updates

alokkulkarni/ikube #1

3.2.4.RELEASE → 6.1.14 Major PR

Open about 1 year ago

Bump org.springframework.security:spring-security-core from 5.6.2 to 5.7.14

AKJUS/ORCID-Source #76

5.6.2 → 5.7.14 Minor PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 5.7.8 to 6.5.0

fiteroxygen/fineract-template #55

5.7.8 → 6.5.0 Major PR

Closed about 1 year ago 1 comment

Bump the spring group across 1 directory with 21 updates

Netcracker/qubership-core-rest-libraries #20

6.4.1 → 6.5.0 Minor PR

Closed about 1 year ago

chore(deps): bump org.springframework.security:spring-security-core from 6.4.2 to 6.5.0

sergej-stk/vahana #21

6.4.2 → 6.5.0 Minor PR

Open about 1 year ago

build(deps): bump org.springframework.security:spring-security-core from 6.4.6 to 6.5.0 in /backend

isidromerayo/TFG_UNIR #285

6.4.6 → 6.5.0 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump org.springframework.security:spring-security-core from 6.4.2 to 6.5.0

Beneking102/bananaSplitBackend #9

6.4.2 → 6.5.0 Minor PR

Open about 1 year ago

Bump the spring group with 16 updates

DSpace/DSpace #10771

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

Bump the gradle-updates group with 2 updates

ministryofjustice/laa-ccms-soa-gateway-api #198

6.4.6 → 6.5.0 Minor PR

Open about 1 year ago

Bump the spring group with 12 updates

Netcracker/qubership-core-rest-libraries #9

6.4.1 → 6.5.0 Minor PR

Open about 1 year ago

Bump org.springframework.security:spring-security-core from 5.8.0 to 6.5.0

kashishrastogi03/java-project #8

5.8.0 → 6.5.0 Major PR

Closed about 1 year ago 1 comment

chore: bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

sarananivsh/helloworld6 #139

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

Bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

navikt/pensjon-selvbetjening-opptjening-backend #225

6.4.5 → 6.5.0 Minor PR

Closed about 1 year ago 1 comment

chore: bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

sarananivsh/helloworld2 #93

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

Bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

quarkusio/quarkus-spring-security-api #22

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

Bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

kashishrastogi03/major_assignment #11

6.4.5 → 6.5.0 Minor PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

talsma-ict/context-propagation #577

6.4.5 → 6.5.0 Minor PR

Open about 1 year ago 2 comments

Bump org.springframework.security:spring-security-core from 5.2.21.RELEASE to 5.7.14 in /target/m2e-wtp/web-resources/META-INF/maven/cl.awake/psegurito

Jktolorza/SeguritoProjectFinal #53

5.2.21.RELEASE → 5.7.14 Minor PR

Open about 1 year ago

Bump org.springframework.security:spring-security-core from 6.2.4 to 6.2.8

trapt0r/python-flask #18

6.2.4 → 6.2.8 Patch PR

Merged about 1 year ago

chore: bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

sarananivsh/helloworld3 #91

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

chore: bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

sarananivsh/helloworld4 #116

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

build(deps-dev): Bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

smallrye/smallrye-open-api #2270

6.4.5 → 6.5.0 Minor PR

Open about 1 year ago 1 comment

chore(deps): bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

thomasvincent/jenkins-script-library #36

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

chore: bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

sarananivsh/helloworld5 #94

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

build(deps): bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.0

apereo/java-cas-client #1017

6.4.5 → 6.5.0 Minor PR

Merged about 1 year ago

Bump org.springframework.security:spring-security-core from 5.8.0 to 6.4.5

kashishrastogi03/java-project #7

5.8.0 → 6.4.5 Major PR

Closed about 1 year ago 2 comments

Bump the maven group across 1 directory with 18 updates

draghtnight/EUSURVEY #1

5.7.5 → 5.7.14 Patch PR

Open about 1 year ago

Bump the maven group across 2 directories with 23 updates

sundaramoorthym/kylin #1

4.2.3.RELEASE → 5.7.14 Major PR

Open about 1 year ago

Bump org.springframework.security:spring-security-core from 5.8.0 to 6.4.5

kashishrastogi03/major_assignment #1

5.8.0 → 6.4.5 Major PR

Merged about 1 year ago

build(deps): bump the maven group with 2 updates

Activiti/Activiti #5007

6.4.4 → 6.4.5 Patch PR

Open about 1 year ago 1 comment

chore(deps): bump org.springframework.security:spring-security-core from 6.4.2 to 6.4.5

Beneking102/bananaSplitBackend #6

6.4.2 → 6.4.5 Patch PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 6.4.3 to 6.4.5

navikt/pensjon-selvbetjening-opptjening-backend #217

6.4.3 → 6.4.5 Patch PR

Closed about 1 year ago 1 comment

build(deps): bump org.springframework.security:spring-security-core from 6.4.2 to 6.4.4

virtualidentityag/digisucht-onlineBeratung-statisticsService #1

6.4.2 → 6.4.4 Patch PR

Open about 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 5.0.1.RELEASE to 5.7.14 in /spring-integration

predragstevanovic/tutorials #4

5.0.1.RELEASE → 5.7.14 Minor PR

Closed about 1 year ago

Bump org.springframework.security:spring-security-core from 6.4.1 to 6.4.4 in /HSUCommonParent

MarvinHsu/HSUCommon #85

6.4.1 → 6.4.4 Patch PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 6.4.1 to 6.4.4

Datzu712/Fidechat-backend #3

6.4.1 → 6.4.4 Patch PR

Closed about 1 year ago

Bump org.springframework.security:spring-security-core from 6.4.3 to 6.4.4

DtsvnProj/craftercms #1

6.4.3 → 6.4.4 Patch PR

Closed about 1 year ago 1 comment

Bump the maven group across 1 directory with 3 updates

chainguard-dev/cookbook #11

6.2.4 → 6.2.8 Patch PR

Closed about 1 year ago

Bump the maven group across 6 directories with 19 updates

zy6p/geoserver #27

5.1.13.RELEASE → 5.7.14 Minor PR

Open over 1 year ago 3 comments

Package Details

Name:	`org.springframework.security:spring-security-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework.security:spring-security-core`
JSON API:	View JSON

Security Advisories

30

Active advisories

CRITICAL 3

HIGH 11

MODERATE 15

LOW 1

View All maven Advisories

Package Information

Description:

Spring Security

Repository:	https://github.com/spring-projects/spring-security
Homepage:	https://spring.io/projects/spring-security
Latest Release:	`6.5.0` about 1 year ago
Dependent Repos:	44,289
Dependent Packages:	1,940
Ranking:	Top 0.0214% by dependent repos Top 0.0366% by dependent pkgs

PR Status

Open 123 (42.3%)

Merged 68 (23.4%)

Closed 87 (29.9%)

PR Types

Major 46 (15.8%)

Minor 77 (26.5%)

Patch 155 (53.3%)