`org.springframework.security:spring-security-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework.security:spring-security-core

Total PRs:
291 Dependabot PRs

Latest PR:
11 days ago

Unique Repositories:
130 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Spring Security uses insufficiently random values

GHSA-v2r2-7qm7-jj6v CVE-2019-3795 MODERATE published about 7 years ago • updated 41 minutes ago

Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when u...

Spring Security and Spring Framework may not recognize certain paths that should be protected

GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 2 days ago

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...

Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider

GHSA-vxf7-qj7q-83fh CVE-2026-22746 LOW published about 2 months ago • updated about 3 hours ago

Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user at...

Spring Security logout not clearing security context

GHSA-x873-6rgc-94jc CVE-2023-20862 MODERATE published about 3 years ago • updated 1 day ago

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not pr...

Integer overflow in BCrypt class in Spring Security

GHSA-wx54-3278-m5g4 CVE-2022-22976 MODERATE published about 4 years ago • updated 2 days ago

Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. Wh...

View all 30 advisories

Recent PRs

RSS Feed

Bump the spring group with 4 updates

archivesatncbs/ancbs-collections-backend #6

5.7.14 → 5.8.16 Minor PR

Open over 1 year ago 1 comment

Bump the maven group across 2 directories with 12 updates

woodrowsWindow/ORCID-Source #1

5.6.2 → 5.7.14 Minor PR

Closed over 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 6.1.8 to 6.2.8

jpwiig/RockClimbsKotlin #2

6.1.8 → 6.2.8 Minor PR

Merged over 1 year ago

Bump org.springframework.security:spring-security-core from 5.7.12 to 5.7.14 in /load-generator

vikreinok/performance-evaluation-framework #27

5.7.12 → 5.7.14 Patch PR

Merged over 1 year ago

Bump org.springframework.security:spring-security-core from 5.7.12 to 5.7.14

vall-ball/kino01 #35

5.7.12 → 5.7.14 Patch PR

Merged over 1 year ago

Bump org.springframework.security:spring-security-core from 5.7.12 to 5.7.14

vall-ball/biblio01 #35

5.7.12 → 5.7.14 Patch PR

Merged over 1 year ago

Bump org.springframework.security:spring-security-core from 5.7.12 to 5.7.14

vall-ball/bank01 #31

5.7.12 → 5.7.14 Patch PR

Merged over 1 year ago

Bump org.springframework.security:spring-security-core from 5.7.12 to 5.7.14 in /SpMVC_CRUD_06_BBS5_AjaxFileUp2

callor/Biz-Spring-403-2019-07 #187

5.7.12 → 5.7.14 Patch PR

Merged over 1 year ago

Bump org.springframework.security:spring-security-core from 5.7.12 to 5.7.14

vall-ball/forum02 #27

5.7.12 → 5.7.14 Patch PR

Merged over 1 year ago

Bump org.springframework.security:spring-security-core from 5.7.12 to 5.7.14 in /SpMVC_CRUD_06_BBS5_AjaxFileUp

callor/Biz-Spring-403-2019-07 #186

5.7.12 → 5.7.14 Patch PR

Merged over 1 year ago

Bump org.springframework.security:spring-security-core from 5.5.2 to 5.7.14 in /spring-boot/email-service

rslakra/Samples #30

5.5.2 → 5.7.14 Minor PR

Closed over 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 5.1.1.RELEASE to 5.7.14 in /webui

robinhood-jim/JavaFramework #203

5.1.1.RELEASE → 5.7.14 Minor PR

Closed over 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 3.2.10.RELEASE to 5.7.14 in /service-provider

Opetushallitus/otuva #24

3.2.10.RELEASE → 5.7.14 Major PR

Closed over 1 year ago

Bump org.springframework.security:spring-security-core from 6.3.3 to 6.3.5 in /src/backend/libs/efiling-bom

bcgov/jag-file-submission #2873

6.3.3 → 6.3.5 Patch PR

Open over 1 year ago 2 comments

Bump org.springframework.security:spring-security-core from 6.3.3 to 6.3.5 in /code/labflow-backend

NathanNeve/LabFlow #145

6.3.3 → 6.3.5 Patch PR

Closed over 1 year ago

Bump org.springframework.security:spring-security-core from 6.3.3 to 6.3.5 in /digitalforms-api

bcgov/jag-rsbc-digital-forms-vips-integration #166

6.3.3 → 6.3.5 Patch PR

Closed over 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 6.3.3 to 6.3.5 in /bom

gentics/mesh #1647

6.3.3 → 6.3.5 Patch PR

Closed over 1 year ago

Bump the maven group across 2 directories with 2 updates

offsoc/jeepay #1

5.4.7 → 5.7.12 Minor PR

Closed over 1 year ago 1 comment

Bump the maven group across 2 directories with 3 updates

offsoc/JeepayPlus #1

5.4.7 → 5.7.12 Minor PR

Closed over 1 year ago 1 comment

Bump org.springframework.security:spring-security-core from 6.2.3 to 6.3.2

aehrc/snap2snomed #483

6.2.3 → 6.3.2 Minor PR

Open almost 2 years ago 3 comments

Bump org.springframework.security:spring-security-core from 4.2.17.RELEASE to 5.7.12 in /superfly-demo

payneteasy/superfly #97

4.2.17.RELEASE → 5.7.12 Major PR

Closed almost 2 years ago 1 comment

Bump org.springframework.security:spring-security-core from 5.7.10 to 5.7.12

DIGI-UW/OpenELIS-Global-2 #1105

5.7.10 → 5.7.12 Patch PR

Closed about 2 years ago 1 comment

Bump org.springframework.security:spring-security-core from 5.5.7 to 5.7.12

jumarko/poptavka #58

5.5.7 → 5.7.12 Minor PR

Closed about 2 years ago 2 comments

Bump org.springframework.security:spring-security-core from 5.5.7 to 5.7.12 in /healthplannerAPI-master

tany007/healthplanner #3

5.5.7 → 5.7.12 Minor PR

Merged over 2 years ago

build(deps): bump org.springframework.security:spring-security-core from 5.3.0.RELEASE to 5.7.12 in /websocket-api

Rob-Leggett/angular_websockets_security #284

5.3.0.RELEASE → 5.7.12 Minor PR

Closed over 2 years ago 1 comment

Bump org.springframework.security:spring-security-core from 5.1.1.RELEASE to 5.7.12

Jktolorza/SeguritoProjectFinal #47

5.1.1.RELEASE → 5.7.12 Minor PR

Merged over 2 years ago

Bump org.springframework.security:spring-security-core from 5.1.1.RELEASE to 5.7.12 in /target/m2e-wtp/web-resources/META-INF/maven/cl.awake/psegurito

Jktolorza/SeguritoProjectFinal #46

5.1.1.RELEASE → 5.7.12 Minor PR

Closed over 2 years ago 1 comment

Bump org.springframework.security:spring-security-core from 6.2.2 to 6.2.3 in /api

aehrc/snap2snomed #415

6.2.2 → 6.2.3 Patch PR

Closed over 2 years ago 2 comments

Package Details

Name:	`org.springframework.security:spring-security-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework.security:spring-security-core`
JSON API:	View JSON

Security Advisories

30

Active advisories

CRITICAL 3

HIGH 11

MODERATE 15

LOW 1

View All maven Advisories

Package Information

Description:

Spring Security

Repository:	https://github.com/spring-projects/spring-security
Homepage:	https://spring.io/projects/spring-security
Latest Release:	`6.5.0` about 1 year ago
Dependent Repos:	44,289
Dependent Packages:	1,940
Ranking:	Top 0.0214% by dependent repos Top 0.0366% by dependent pkgs

PR Status

Open 123 (42.3%)

Merged 68 (23.4%)

Closed 87 (29.9%)

PR Types

Major 46 (15.8%)

Minor 77 (26.5%)

Patch 155 (53.3%)