`org.springframework.security:spring-security-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework.security:spring-security-core

Total PRs:
291 Dependabot PRs

Latest PR:
10 days ago

Unique Repositories:
130 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Spring Security uses insufficiently random values

GHSA-v2r2-7qm7-jj6v CVE-2019-3795 MODERATE published about 7 years ago • updated about 16 hours ago

Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when u...

Spring Security and Spring Framework may not recognize certain paths that should be protected

GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 2 days ago

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...

Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProvider

GHSA-vxf7-qj7q-83fh CVE-2026-22746 LOW published about 2 months ago • updated about 13 hours ago

Vulnerability in Spring Spring Security. If an application is using the UserDetails#isEnabled, #isAccountNonExpired, or #isAccountNonLocked user at...

Spring Security logout not clearing security context

GHSA-x873-6rgc-94jc CVE-2023-20862 MODERATE published about 3 years ago • updated about 16 hours ago

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not pr...

Integer overflow in BCrypt class in Spring Security

GHSA-wx54-3278-m5g4 CVE-2022-22976 MODERATE published about 4 years ago • updated 1 day ago

Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. Wh...

View all 30 advisories

Recent PRs (filtered by: Open )

RSS Feed Clear filter

chore(deps)(deps): bump org.springframework.security:spring-security-core from 6.5.10 to 7.0.5 in /BackEnd-Clinica

YmidOrtega/Clinica #98

6.5.10 → 7.0.5 Major PR

Open about 2 months ago 1 comment

chore(deps): bump org.springframework.security:spring-security-core from 6.5.9 to 6.5.10 in /00_Legacy/1.server/webui in the maven group across 1 directory

hartkimin/DFAS_ENT_RE_V2 #142

6.5.9 → 6.5.10 Patch PR

Open about 2 months ago 1 comment

Bump org.springframework.security:spring-security-core from 6.5.9 to 6.5.10

companieshouse/filing-history-data-api #129

6.5.9 → 6.5.10 Patch PR

Open about 2 months ago 2 comments

Bump org.springframework.security:spring-security-core from 6.5.8 to 6.5.10

companieshouse/disqualified-officers-data-api #117

6.5.8 → 6.5.10 Patch PR

Open about 2 months ago 2 comments

Bump org.springframework.security:spring-security-core from 7.0.2 to 7.0.3

talsma-ict/context-propagation #701

7.0.2 → 7.0.3 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the all-gradle group across 1 directory with 54 updates

dallay/hatchgrid #233

6.3.1 → 7.0.2 Major PR

Open 5 months ago 4 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8479

6.5.7 → 7.0.2 Major PR

Open 6 months ago 4 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8478

6.5.7 → 7.0.2 Major PR

Open 6 months ago 7 comments

Bump the all-maven-deps group across 3 directories with 86 updates

craftercms/craftercms #8474

7.0.0 → 7.0.2 Patch PR

Open 6 months ago 3 comments

chore(deps): bump the all-gradle group across 1 directory with 29 updates

dallay/cvix #434

6.5.7 → 7.0.2 Major PR

Open 6 months ago 5 comments

chore(deps): bump the all-gradle group across 1 directory with 18 updates

dallay/cvix #417

6.5.7 → 7.0.0 Major PR

Open 6 months ago 4 comments

chore(deps): bump the all-gradle group across 1 directory with 16 updates

dallay/cvix #382

6.5.7 → 7.0.0 Major PR

Open 6 months ago 3 comments

chore(deps): bump the all-gradle group across 1 directory with 18 updates

dallay/cvix #361

6.5.7 → 7.0.0 Major PR

Open 7 months ago 5 comments

Bump the maven group across 22 directories with 13 updates

djdiakametavers/opencast #1

3.1.7.RELEASE → 5.7.14 Major PR

Open 7 months ago 1 comment

chore(deps): bump the all-gradle group across 1 directory with 18 updates

dallay/cvix #318

6.5.7 → 7.0.0 Major PR

Open 7 months ago 4 comments

chore(deps): bump org.springframework.security:spring-security-core from 6.4.5 to 7.0.0

Gegcuk/kidsGPTbackend #179

6.4.5 → 7.0.0 Major PR

Open 7 months ago 1 comment

chore(deps): bump the all-gradle group across 1 directory with 19 updates

dallay/cvix #307

6.5.6 → 7.0.0 Major PR

Open 7 months ago 5 comments

Bump org.springframework.security:spring-security-core from 6.5.6 to 7.0.0

talsma-ict/context-propagation #668

6.5.6 → 7.0.0 Major PR

Open 7 months ago 1 comment

chore(deps): bump the all-gradle group across 1 directory with 53 updates

dallay/hatchgrid #216

6.3.1 → 6.5.6 Minor PR

Open 8 months ago 4 comments

Bump the all-gradle group across 1 directory with 54 updates

dallay/cvix #32

6.3.1 → 6.5.6 Minor PR

Open 8 months ago 1 comment

build(deps): bump the all-gradle group across 1 directory with 53 updates

yacosta738/saas-template #11

6.3.1 → 6.5.5 Minor PR

Open 8 months ago 2 comments

Bump the maven group across 2 directories with 17 updates

Jguest7/ORCID-Source #1

5.6.2 → 5.7.14 Minor PR

Open 8 months ago

Bump the all-maven-deps group across 3 directories with 76 updates

craftercms/craftercms #8380

6.5.4 → 6.5.5 Patch PR

Open 8 months ago

Bump org.springframework.security:spring-security-core from 6.2.3 to 6.2.8 in /backend/api-ego/atv-module

Talhaimran03/e-go #30

6.2.3 → 6.2.8 Patch PR

Open 9 months ago

chore(deps): bump org.springframework.security:spring-security-core from 6.4.4 to 6.4.10 in /BE/feed

team2room/KeyWi #2

6.4.4 → 6.4.10 Patch PR

Open 9 months ago

Bump the spring group with 28 updates

DSpace/DSpace #11365

6.5.3 → 6.5.5 Patch PR

Open 9 months ago

Bump the all-maven-deps group across 3 directories with 72 updates

craftercms/craftercms #8373

6.5.4 → 6.5.5 Patch PR

Open 9 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 87 updates

QuocKhanh2002/craftercms #2

6.5.3 → 6.5.5 Patch PR

Open 9 months ago

Bump org.springframework.security:spring-security-core from 6.4.6 to 6.4.10

boomerang-io/bosun.service.repository #14

6.4.6 → 6.4.10 Patch PR

Open 9 months ago

Bump the all-maven-deps group across 3 directories with 78 updates

QuocKhanh2002/craftercms #1

6.5.3 → 6.5.5 Patch PR

Open 9 months ago

Gradle(deps): Bump org.springframework.security:spring-security-core from 6.4.6 to 6.5.5 in /maat-orchestration

ministryofjustice/laa-maat-orchestration #287

6.4.6 → 6.5.5 Minor PR

Open 9 months ago

Bump org.springframework.security:spring-security-core from 6.5.4 to 6.5.5

BeatrixZselezny/Police-simulation-game-project #103

6.5.4 → 6.5.5 Patch PR

Open 9 months ago

Bump the backend-prod group across 2 directories with 14 updates

OpenConext/OpenConext-access #193

6.5.4 → 6.5.5 Patch PR

Open 9 months ago

Bump the all-maven-deps group across 3 directories with 55 updates

craftercms/craftercms #8360

6.5.4 → 6.5.5 Patch PR

Open 9 months ago 1 comment

chore: bump org.springframework.security:spring-security-core from 6.5.4 to 6.5.5

sarananivsh/helloworld3 #158

6.5.4 → 6.5.5 Patch PR

Open 9 months ago

SONARJAVA-5762 Bump org.springframework.security:spring-security-core from 6.4.6 to 6.4.10 in /java-checks-test-sources/spring-3.2

SonarSource/sonar-java #5295

6.4.6 → 6.4.10 Patch PR

Open 9 months ago 2 comments

Bump org.springframework.security:spring-security-core from 6.5.2 to 6.5.4 in /api

aehrc/snap2snomed #519

6.5.2 → 6.5.4 Patch PR

Open 9 months ago 1 comment

chore(deps): bump org.springframework.security:spring-security-core from 6.4.2 to 6.4.10 in the maven group across 1 directory

sergej-stk/vahana #46

6.4.2 → 6.4.10 Patch PR

Open 9 months ago

Bump org.springframework.security:spring-security-core from 6.4.4 to 6.4.10 in /server/gratitude-photodiary in the maven group across 1 directory

saatvik55/Cherizz-App #3

6.4.4 → 6.4.10 Patch PR

Open 9 months ago

build(deps): bump org.springframework.security:spring-security-core from 6.4.4 to 6.4.10 in /product-service

BLuBin7/shopping-overflow #50

6.4.4 → 6.4.10 Patch PR

Open 9 months ago

build(deps): bump org.springframework.security:spring-security-core from 6.5.3 to 6.5.4 in the maven group across 1 directory

Activiti/Activiti #5138

6.5.3 → 6.5.4 Patch PR

Open 9 months ago 1 comment

Bump org.springframework.security:spring-security-core from 6.5.2 to 6.5.4

companieshouse/payments-admin-web #67

6.5.2 → 6.5.4 Patch PR

Open 9 months ago

Bump org.springframework.security:spring-security-core from 6.5.1 to 6.5.4 in /mvn/dependencies/spring-security

link-it/govway #245

6.5.1 → 6.5.4 Patch PR

Open 9 months ago

Bump org.springframework.security:spring-security-core from 6.5.1 to 6.5.4

companieshouse/chs-notification-sender-api #74

6.5.1 → 6.5.4 Patch PR

Open 9 months ago

Bump org.springframework.security:spring-security-core from 6.5.1 to 6.5.4

companieshouse/chs-notification-kafka-consumer #71

6.5.1 → 6.5.4 Patch PR

Open 9 months ago

chore(deps): bump org.springframework.security:spring-security-core from 6.5.1 to 6.5.4 in /backend-java-springboot/Merban Capital backend

g4Joey/MerbanHub #55

6.5.1 → 6.5.4 Patch PR

Open 9 months ago 2 comments

Bump org.springframework.security:spring-security-core from 6.5.0 to 6.5.4

companieshouse/chs-gov-uk-notify-integration-api #78

6.5.0 → 6.5.4 Patch PR

Open 9 months ago 5 comments

Bump org.springframework.security:spring-security-core from 6.4.4 to 6.4.10

companieshouse/filing-history-data-api #120

6.4.4 → 6.4.10 Patch PR

Open 9 months ago 1 comment

Bump org.springframework.security:spring-security-core from 6.5.3 to 6.5.4

coherence-community/coherence-spring #800

6.5.3 → 6.5.4 Patch PR

Open 9 months ago

Bump org.springframework.security:spring-security-core from 6.5.1 to 6.5.4

companieshouse/payments.web.ch.gov.uk #121

6.5.1 → 6.5.4 Patch PR

Open 9 months ago

Package Details

Name:	`org.springframework.security:spring-security-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework.security:spring-security-core`
JSON API:	View JSON

Security Advisories

30

Active advisories

CRITICAL 3

HIGH 11

MODERATE 15

LOW 1

View All maven Advisories

Package Information

Description:

Spring Security

Repository:	https://github.com/spring-projects/spring-security
Homepage:	https://spring.io/projects/spring-security
Latest Release:	`6.5.0` about 1 year ago
Dependent Repos:	44,289
Dependent Packages:	1,940
Ranking:	Top 0.0214% by dependent repos Top 0.0366% by dependent pkgs

PR Status

Open 123 (42.3%)

Merged 68 (23.4%)

Closed 87 (29.9%)

PR Types

Major 46 (15.8%)

Minor 77 (26.5%)

Patch 155 (53.3%)