`org.springframework.security:spring-security-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework.security:spring-security-core

Total PRs:
291 Dependabot PRs

Latest PR:
10 days ago

Unique Repositories:
130 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Spring Security uses insufficiently random values

GHSA-v2r2-7qm7-jj6v CVE-2019-3795 MODERATE published about 7 years ago • updated about 18 hours ago

Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when u...

Spring Security and Spring Framework may not recognize certain paths that should be protected

GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 2 days ago

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...

Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider

GHSA-vxf7-qj7q-83fh CVE-2026-22746 LOW published about 2 months ago • updated about 15 hours ago

Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user at...

Spring Security logout not clearing security context

GHSA-x873-6rgc-94jc CVE-2023-20862 MODERATE published about 3 years ago • updated about 18 hours ago

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not pr...

Integer overflow in BCrypt class in Spring Security

GHSA-wx54-3278-m5g4 CVE-2022-22976 MODERATE published about 4 years ago • updated 1 day ago

Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. Wh...

View all 30 advisories

Recent PRs (filtered by: Closed )

RSS Feed Clear filter

build(deps): bump the all-maven group across 1 directory with 115 updates

beyonai/ByClaw #134

6.5.9 → 7.0.5 Major PR

Closed 10 days ago 2 comments

build(deps): bump org.springframework.security:spring-security-core from 6.4.4 to 6.4.10

levelp/webissues_simple #49

6.4.4 → 6.4.10 Patch PR

Closed 2 months ago 1 comment

Bump the spring group with 16 updates

Nomanijaz58/D-Space-Digital-Library #5

6.5.7 → 6.5.8 Patch PR

Closed 3 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 46 updates

craftercms/craftercms #8551

7.0.2 → 7.0.3 Patch PR

Closed 4 months ago 1 comment

build(deps): bump org.springframework.security:spring-security-core from 6.4.10 to 7.0.2 in /issuer-application

swiyu-admin-ch/swiyu-issuer #212

6.4.10 → 7.0.2 Major PR

Closed 4 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 63 updates

craftercms/craftercms #8480

6.5.7 → 7.0.2 Major PR

Closed 6 months ago 2 comments

chore(deps): bump the all-gradle group across 1 directory with 54 updates

dallay/hatchgrid #230

6.3.1 → 7.0.2 Major PR

Closed 6 months ago 5 comments

Bump the all-maven-deps group across 3 directories with 122 updates

QuocKhanh2002/craftercms #13

6.5.3 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 121 updates

craftercms/craftercms #8464

7.0.0 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

Bump org.springframework.security:spring-security-core from 6.5.6 to 7.0.2

quarkusio/quarkus-spring-security-api #40

6.5.6 → 7.0.2 Major PR

Closed 6 months ago 2 comments

Bump the all-maven-deps group across 3 directories with 118 updates

craftercms/craftercms #8460

7.0.0 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

Bump the gradle-updates group across 1 directory with 11 updates

ministryofjustice/laa-ccms-soa-gateway-api #224

6.5.5 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump the maven group across 4 directories with 20 updates

ownerCTI/hapi-fhir #4

5.7.12 → 5.7.14 Patch PR

Closed 6 months ago 2 comments

chore(deps): bump the all-gradle group across 1 directory with 30 updates

dallay/cvix #293

6.5.6 → 7.0.0 Major PR

Closed 7 months ago 4 comments

Bump org.springframework.security:spring-security-core from 6.5.4 to 7.0.0

SpiNNakerManchester/JavaSpiNNaker #1378

6.5.4 → 7.0.0 Major PR

Closed 7 months ago 1 comment

chore(deps)(deps): bump org.springframework.security:spring-security-core from 6.5.4 to 7.0.0 in /BackEnd-Clinica

YmidOrtega/Clinica #46

6.5.4 → 7.0.0 Major PR

Closed 7 months ago 2 comments

Bump org.springframework.security:spring-security-core from 6.5.6 to 7.0.0

quarkusio/quarkus-spring-security-api #35

6.5.6 → 7.0.0 Major PR

Closed 7 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 109 updates

craftercms/craftercms #8442

6.5.4 → 7.0.0 Major PR

Closed 7 months ago 1 comment

Bump org.springframework.security:spring-security-core from 5.5.2 to 5.7.14 in /SpringBoot/email-service

rslakra/Samples #42

5.5.2 → 5.7.14 Minor PR

Closed 7 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 99 updates

QuocKhanh2002/craftercms #6

6.5.3 → 6.5.6 Patch PR

Closed 8 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 84 updates

craftercms/craftercms #8408

6.5.4 → 6.5.6 Patch PR

Closed 8 months ago 1 comment

Bump org.springframework.security:spring-security-core from 5.8.0 to 6.5.6

kashishrastogi03/java-project #23

5.8.0 → 6.5.6 Major PR

Closed 8 months ago 1 comment

build(deps): bump the all-gradle group with 53 updates

yacosta738/saas-template #3

6.3.1 → 6.5.5 Minor PR

Closed 8 months ago 2 comments

Bump org.springframework.security:spring-security-core from 6.5.3 to 6.5.4 in /ikasaneip

ikasanEIP/ikasan #1481

6.5.3 → 6.5.4 Patch PR

Closed 9 months ago

Bump the gradle-updates group across 1 directory with 7 updates

ministryofjustice/laa-ccms-soa-gateway-api #213

6.5.2 → 6.5.5 Patch PR

Closed 9 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 56 updates

craftercms/craftercms #8364

6.5.4 → 6.5.5 Patch PR

Closed 9 months ago 1 comment

chore: bump org.springframework.security:spring-security-core from 6.5.3 to 6.5.5

sarananivsh/helloworld2 #160

6.5.3 → 6.5.5 Patch PR

Closed 9 months ago 1 comment

Bump org.springframework.security:spring-security-core from 5.8.0 to 6.5.5

kashishrastogi03/java-project #19

5.8.0 → 6.5.5 Major PR

Closed 9 months ago 1 comment

Bump org.springframework.security:spring-security-core from 6.4.5 to 6.4.10

ralscha/extdirectspring #188

6.4.5 → 6.4.10 Patch PR

Closed 9 months ago 1 comment

build(deps): bump org.springframework.security:spring-security-core from 6.5.3 to 6.5.4 in the maven group across 1 directory

DSpace/DSpace #11319

6.5.3 → 6.5.4 Patch PR

Closed 9 months ago 2 comments

Bump org.springframework.security:spring-security-core from 6.5.2 to 6.5.4 in /HSUCommonParent

MarvinHsu/HSUCommon #97

6.5.2 → 6.5.4 Patch PR

Closed 9 months ago

Bump org.springframework.security:spring-security-core from 6.5.1 to 6.5.4

companieshouse/psc-data-api #207

6.5.1 → 6.5.4 Patch PR

Closed 9 months ago 3 comments

Bump org.springframework.security:spring-security-core from 5.8.0 to 6.5.4

kashishrastogi03/java-project #18

5.8.0 → 6.5.4 Major PR

Closed 9 months ago 1 comment

Gradle(deps): Bump org.springframework.security:spring-security-core from 6.4.6 to 6.5.4 in /maat-orchestration

ministryofjustice/laa-maat-orchestration #285

6.4.6 → 6.5.4 Minor PR

Closed 9 months ago 2 comments

chore(deps): bump org.springframework.security:spring-security-core from 6.4.2 to 6.5.3

sergej-stk/vahana #39

6.4.2 → 6.5.3 Minor PR

Closed 10 months ago 1 comment

chore(deps): bump the all-gradle group across 1 directory with 52 updates

dallay/hatchgrid #197

6.3.1 → 6.5.3 Minor PR

Closed 10 months ago 5 comments

Bump org.springframework.security:spring-security-core from 5.8.0 to 6.5.3

kashishrastogi03/java-project #16

5.8.0 → 6.5.3 Major PR

Closed 10 months ago 1 comment

Bump org.springframework.security:spring-security-core from 6.4.5 to 6.5.3

kashishrastogi03/major_assignment #24

6.4.5 → 6.5.3 Minor PR

Closed 10 months ago 1 comment

Bump org.springframework.security:spring-security-core from 5.7.8 to 6.5.3

fiteroxygen/fineract-template #100

5.7.8 → 6.5.3 Major PR

Closed 10 months ago 1 comment

Gradle(deps): Bump org.springframework.security:spring-security-core from 6.4.6 to 6.5.3 in /maat-orchestration

ministryofjustice/laa-maat-orchestration #281

6.4.6 → 6.5.3 Minor PR

Closed 10 months ago 2 comments