`org.springframework.security:spring-security-web`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework.security:spring-security-web

Total PRs:
171 Dependabot PRs

Latest PR:
about 1 month ago

Unique Repositories:
77 repositories

Unique Repos (30 days):
2 repositories

Security Advisories

Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

GHSA-293q-567p-wmwq CVE-2026-47838 MODERATE published about 1 month ago • updated 4 days ago

In Spring Security Web, `SubjectDnX509PrincipalExtractor` does not correctly handle certain malformed X.509 certificate CN values, which can lead t...

Privilege escalation in spring security

GHSA-gq28-h5vg-8prx CVE-2021-22112 HIGH published about 5 years ago • updated 7 days ago

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save t...

Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

GHSA-2jrg-rf5x-568g CVE-2026-22747 MODERATE published 3 months ago • updated 3 days ago

Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, whi...

Spring Security HTTP Headers Are not Written Under Some Conditions

GHSA-mf92-479x-3373 CVE-2026-22732 CRITICAL published 4 months ago • updated 5 days ago

When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will...

Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications

GHSA-c4q5-6c82-3qpw CVE-2024-38821 CRITICAL published over 1 year ago • updated 4 days ago

Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain circumstances. For thi...

Recent PRs (filtered by: Closed )

RSS Feed Clear filter

build(deps): bump the all-maven group across 1 directory with 115 updates

beyonai/ByClaw #134

6.5.9 → 7.0.5 Major PR

Closed about 1 month ago 2 comments

Bump the maven group across 2 directories with 3 updates

bedrin/kerb4j #96

6.1.5 → 6.5.9 Minor PR

Closed 2 months ago 3 comments

Bump the maven group across 29 directories with 4 updates

yathin51/spring-and-hibernate-for-beginners #7

5.0.1.RELEASE → 6.5.9 Major PR

Closed 2 months ago 1 comment

Bump the maven group across 23 directories with 4 updates

yathin51/spring-and-hibernate-for-beginners #6

5.0.1.RELEASE → 6.5.9 Major PR

Closed 2 months ago 1 comment

Bump the maven group across 22 directories with 18 updates

veteranbv/nifi #6

4.2.4.RELEASE → 6.5.9 Major PR

Closed 3 months ago 1 comment

Bump org.springframework.security:spring-security-web from 6.5.5 to 6.5.9

skyvers/skyve #272

6.5.5 → 6.5.9 Patch PR

Closed 4 months ago 2 comments

Bump org.springframework.security:spring-security-web from 5.6.2 to 5.7.13

Ankithav18/Vulnerability-Scanning- #7

5.6.2 → 5.7.13 Minor PR

Closed 4 months ago 2 comments

Bump the spring group with 16 updates

Nomanijaz58/D-Space-Digital-Library #5

6.5.7 → 6.5.8 Patch PR

Closed 5 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 46 updates

craftercms/craftercms #8551

7.0.2 → 7.0.3 Patch PR

Closed 5 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 63 updates

craftercms/craftercms #8480

6.5.7 → 7.0.2 Major PR

Closed 7 months ago 2 comments

Bump the all-maven-deps group across 3 directories with 122 updates

QuocKhanh2002/craftercms #13

6.5.3 → 7.0.2 Major PR

Closed 7 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 121 updates

craftercms/craftercms #8464

7.0.0 → 7.0.2 Patch PR

Closed 7 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 118 updates

craftercms/craftercms #8460

7.0.0 → 7.0.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 12 updates

navikt/syk-dig-backend #492

6.5.6 → 7.0.0 Major PR

Closed 8 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 109 updates

craftercms/craftercms #8442

6.5.4 → 7.0.0 Major PR

Closed 8 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 99 updates

QuocKhanh2002/craftercms #6

6.5.3 → 6.5.6 Patch PR

Closed 9 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 84 updates

craftercms/craftercms #8408

6.5.4 → 6.5.6 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 9 updates

navikt/syk-dig-backend #479

6.5.5 → 6.5.6 Patch PR

Closed 9 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 56 updates

craftercms/craftercms #8364

6.5.4 → 6.5.5 Patch PR

Closed 10 months ago 1 comment

Bump org.springframework.security:spring-security-web from 5.0.7.RELEASE to 5.7.13 in /AGIFWeb

abes-esr/formations-bifor #3

5.0.7.RELEASE → 5.7.13 Minor PR

Closed 10 months ago

Bump org.springframework.security:spring-security-web from 5.7.8 to 6.5.4

fiteroxygen/fineract-template #118

5.7.8 → 6.5.4 Major PR

Closed 10 months ago 1 comment

Bump org.springframework.security:spring-security-web from 6.1.5 to 6.5.4

Wikcis/servicetrack-backend #53

6.1.5 → 6.5.4 Minor PR

Closed 10 months ago 1 comment

Bump org.springframework.security:spring-security-web from 6.1.5 to 6.5.3

Wikcis/servicetrack-backend #49

6.1.5 → 6.5.3 Minor PR

Closed 11 months ago 1 comment

Bump the spring group across 1 directory with 17 updates

jesperancinha/moving-objects-service-root #1486

6.4.5 → 6.5.2 Minor PR

Closed 11 months ago 1 comment

Bump org.springframework.security:spring-security-web from 6.2.3 to 6.2.7

shukyurkevin/Site #1

6.2.3 → 6.2.7 Patch PR

Closed 12 months ago

chore(deps): bump the dependencies group across 1 directory with 26 updates

navikt/syk-dig-backend #465

6.4.3 → 6.5.2 Minor PR

Closed 12 months ago 1 comment

Bump org.springframework.security:spring-security-web from 5.7.8 to 6.5.2

fiteroxygen/fineract-template #92

5.7.8 → 6.5.2 Major PR

Closed 12 months ago 1 comment

Bump org.springframework.security:spring-security-web from 6.1.5 to 6.5.2

Wikcis/servicetrack-backend #47

6.1.5 → 6.5.2 Minor PR

Closed 12 months ago 1 comment

Bump the spring group across 1 directory with 6 updates

jesperancinha/moving-objects-service-root #1423

6.4.5 → 6.5.1 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 23 updates

navikt/syk-dig-backend #458

6.4.3 → 6.5.0 Minor PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 5.6.2 to 5.7.13

AKJUS/ORCID-Source #79

5.6.2 → 5.7.13 Minor PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 5.7.8 to 6.5.0

fiteroxygen/fineract-template #29

5.7.8 → 6.5.0 Major PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 6.3.3 to 6.5.0 in /library-example

testing-organization-jcayllahua/library-mono-repo #28

6.3.3 → 6.5.0 Minor PR

Closed about 1 year ago

Bump the spring group with 4 updates

jesperancinha/moving-objects-service-root #1372

6.4.5 → 6.5.0 Minor PR

Closed about 1 year ago 1 comment

Bump the spring group across 1 directory with 5 updates

jesperancinha/moving-objects-service-root #1371

6.4.5 → 6.5.0 Minor PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 6.4.5 to 6.5.0

hendisantika/Order-Management-System #59

6.4.5 → 6.5.0 Minor PR

Closed about 1 year ago 2 comments

Bump org.springframework.security:spring-security-web from 6.1.5 to 6.5.0

Wikcis/servicetrack-backend #43

6.1.5 → 6.5.0 Minor PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 5.8.16 to 6.5.0

hmcts/prl-cos-api #3134

5.8.16 → 6.5.0 Major PR

Closed about 1 year ago

Bump org.springframework.security:spring-security-web from 6.3.3 to 6.4.5 in /library-example

testing-organization-jcayllahua/library-mono-repo #26

6.3.3 → 6.4.5 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 22 updates

navikt/syk-dig-backend #454

6.4.3 → 6.4.5 Patch PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 6.4.2 to 6.4.5

H38uS/EntrainementsNatation #264

6.4.2 → 6.4.5 Patch PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 6.4.2 to 6.4.5

H38uS/NosIdeesDeCadeaux #244

6.4.2 → 6.4.5 Patch PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 5.8.6 to 6.4.5

akansha1808/Bastilion #30

5.8.6 → 6.4.5 Major PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 6.1.5 to 6.4.5

Wikcis/servicetrack-backend #41

6.1.5 → 6.4.5 Minor PR

Closed about 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 5.8.16 to 6.4.5

hmcts/prl-cos-api #3113

5.8.16 → 6.4.5 Major PR

Closed about 1 year ago 1 comment

Bump the maven group across 1 directory with 3 updates

chainguard-dev/cookbook #11

6.2.4 → 6.2.7 Patch PR

Closed over 1 year ago

Bump org.springframework.security:spring-security-web from 6.3.3 to 6.4.4

JacksonKuo/app-springboot #19

6.3.3 → 6.4.4 Minor PR

Closed over 1 year ago 4 comments

Bump org.springframework.security:spring-security-web from 5.6.1 to 5.7.13

virtual-imaging-platform/VIP-portal #508

5.6.1 → 5.7.13 Minor PR

Closed over 1 year ago 1 comment

Bump org.springframework.security:spring-security-web from 5.3.9.RELEASE to 5.7.13 in /LogiWebRoads

BrSeal/JavaSchoolStudy #56

5.3.9.RELEASE → 5.7.13 Minor PR

Closed over 1 year ago

Bump org.springframework.security:spring-security-web from 5.8.14 to 5.8.15

EsupPortail/esup-sgc #38

5.8.14 → 5.8.15 Patch PR

Closed over 1 year ago 1 comment

Package Details

Name:	`org.springframework.security:spring-security-web`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework.security:spring-security-web`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 2

HIGH 1

MODERATE 2

View All maven Advisories

Package Information

Description:

Spring Security

Repository:	https://github.com/spring-projects/spring-security
Homepage:	https://spring.io/projects/spring-security
Latest Release:	`6.5.0` about 1 year ago
Dependent Repos:	64,125
Dependent Packages:	1,257
Ranking:	Top 0.0174% by dependent repos Top 0.0593% by dependent pkgs

PR Status

Open 77 (45.0%)

Merged 29 (17.0%)

Closed 50 (29.2%)

PR Types

Major 30 (17.5%)

Minor 70 (40.9%)

Patch 56 (32.7%)