`org.springframework:spring-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.springframework:spring-core

Total PRs:
447 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
205 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Spring Security and Spring Framework may not recognize certain paths that should be protected

GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 2 days ago

Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...

Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework

GHSA-wv88-pf73-x22p CVE-2011-2730 HIGH published about 4 years ago • updated about 22 hours ago

VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), eva...

View all 18 advisories

Recent PRs

RSS Feed

build(deps-dev): bump org.springframework:spring-core from 6.0.2 to 7.0.7

OWASP/SecurityShepherd #869

6.0.2 → 7.0.7 Major PR

Open 16 days ago 1 comment

chore: Bump the production-minor-patch group across 1 directory with 8 updates

SAP/btp-environment-variable-access #332

7.0.6 → 7.0.7 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump org.springframework:spring-core from 6.2.8 to 6.2.11 in /saiku-bom

spiculedata/saiku #842

6.2.8 → 6.2.11 Patch PR

Closed about 1 month ago 2 comments

Bump the maven group across 19 directories with 9 updates

dhay3/spring #3

4.3.9.RELEASE → 4.3.20.RELEASE Patch PR

Closed about 1 month ago 1 comment

chore: Bump the production-minor-patch group across 1 directory with 3 updates

SAP/btp-environment-variable-access #326

7.0.6 → 7.0.7 Patch PR

Closed about 2 months ago 1 comment

chore: Bump org.springframework:spring-core from 7.0.6 to 7.0.7 in the production-minor-patch group

SAP/btp-environment-variable-access #323

7.0.6 → 7.0.7 Patch PR

Closed 2 months ago 1 comment

Bump org.springframework:spring-core from 7.0.6 to 7.0.7

assertj/assertj #4222

7.0.6 → 7.0.7 Patch PR

Open 2 months ago 1 comment

Bump org.springframework:spring-core from 5.2.0.RELEASE to 7.0.6

ankitha39/vulnerability-testing #16

5.2.0.RELEASE → 7.0.6 Major PR

Open 2 months ago 1 comment

Bump the maven group across 3 directories with 21 updates

idgrou/sakai #10

5.3.39 → 6.2.11 Major PR

Closed 2 months ago 2 comments

build(deps): bump org.springframework:spring-core from 6.2.6 to 6.2.11

levelp/webissues_simple #51

6.2.6 → 6.2.11 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the production-deps group with 8 updates

MatrixDai/liquibase #25

7.0.5 → 7.0.6 Patch PR

Closed 3 months ago 2 comments

Bump the all-minor-patch group across 1 directory with 11 updates

ehrbase/openEHR_SDK #731

6.2.15 → 6.2.17 Patch PR

Closed 3 months ago 1 comment

Bump org.springframework:spring-core from 7.0.5 to 7.0.6

PCGen/pcgen #7536

7.0.5 → 7.0.6 Patch PR

Open 3 months ago 2 comments

fix(deps): bump the prod-deps group with 3 updates

folio-org/folio-di-support #71

7.0.5 → 7.0.6 Patch PR

Open 3 months ago 1 comment

Bump org.springframework:spring-core from 7.0.5 to 7.0.6

assertj/assertj #4186

7.0.5 → 7.0.6 Patch PR

Open 3 months ago 1 comment

Bump the safe-patch-updates group with 20 updates

hhund/dsf #9

6.2.15 → 6.2.16 Patch PR

Closed 3 months ago 1 comment

Bump the dependencies group across 1 directory with 58 updates

apache/logging-log4j2 #4055

6.2.9 → 7.0.5 Major PR

Closed 4 months ago 1 comment

chore(deps): bump the maven group across 4 directories with 7 updates

escbeargew99-stack/OpenMetadata #5

6.1.14 → 6.2.11 Minor PR

Open 4 months ago 1 comment

fix(deps): bump org.springframework:spring-core from 6.2.12 to 7.0.5

SDA-SE/sda-dropwizard-commons #4285

6.2.12 → 7.0.5 Major PR

Open 4 months ago 4 comments

Bump org.springframework:spring-core from 7.0.4 to 7.0.5

LarsEckart/learning-hour-only-mock-types-that-you-own #286

7.0.4 → 7.0.5 Patch PR

Closed 4 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 46 updates

craftercms/craftercms #8551

7.0.3 → 7.0.4 Patch PR

Closed 4 months ago 1 comment

fix(deps): bump the prod-deps group with 2 updates

folio-org/folio-di-support #67

7.0.3 → 7.0.4 Patch PR

Open 4 months ago 1 comment

Bump org.springframework:spring-core from 4.3.30.RELEASE to 7.0.4

mjsorribas/gocd #1053

4.3.30.RELEASE → 7.0.4 Major PR

Closed 4 months ago 1 comment

Bump the maven group across 1 directory with 2 updates

nanamix/scouter #1

4.3.18.RELEASE → 4.3.20.RELEASE Patch PR

Closed 5 months ago 1 comment

Bump org.springframework:spring-core from 6.2.12 to 7.0.3

2dgirlismywaifu/My-REST-Services #146

6.2.12 → 7.0.3 Major PR

Open 5 months ago 1 comment

fix(deps): bump org.springframework:spring-core from 6.2.12 to 7.0.3

SDA-SE/sda-dropwizard-commons #4228

6.2.12 → 7.0.3 Major PR

Open 5 months ago 1 comment

fix(deps): bump the prod-deps group across 1 directory with 3 updates

folio-org/folio-di-support #62

7.0.2 → 7.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-deps group with 6 updates

liquibase/liquibase #7524

7.0.2 → 7.0.3 Patch PR

Open 5 months ago 4 comments

Bump org.springframework:spring-core from 7.0.2 to 7.0.3

assertj/assertj #4102

7.0.2 → 7.0.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-deps group with 6 updates

liquibase/liquibase #7517

7.0.2 → 7.0.3 Patch PR

Closed 5 months ago 3 comments

Bump org.springframework:spring-core from 7.0.0 to 7.0.2

yeikel/dependabot-limit-tests #39

7.0.0 → 7.0.2 Patch PR

Closed 5 months ago 1 comment

chore: [DevOps] bump the production-major group across 1 directory with 9 updates

SAP/ai-sdk-java #701

6.2.12 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 63 updates

craftercms/craftercms #8480

6.2.15 → 7.0.2 Major PR

Closed 6 months ago 2 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8479

6.2.15 → 7.0.2 Major PR

Open 6 months ago 4 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8478

6.2.15 → 7.0.2 Major PR

Open 6 months ago 7 comments

Bump the all-maven-deps group across 3 directories with 86 updates

craftercms/craftercms #8474

7.0.1 → 7.0.2 Patch PR

Open 6 months ago 3 comments

Bump the all-maven-deps group across 3 directories with 122 updates

QuocKhanh2002/craftercms #13

6.2.10 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump the maven group across 1 directory with 16 updates

mcneilco/acas-roo-server #496

5.3.20 → 6.2.11 Major PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 121 updates

craftercms/craftercms #8464

7.0.1 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

Bump the all-maven-deps group across 3 directories with 118 updates

craftercms/craftercms #8460

7.0.1 → 7.0.2 Patch PR

Closed 6 months ago 1 comment

fix(deps): bump org.springframework:spring-core from 6.2.12 to 7.0.2

SDA-SE/sda-dropwizard-commons #4192

6.2.12 → 7.0.2 Major PR

Open 6 months ago 1 comment

Bump the gradle-updates group across 1 directory with 11 updates

ministryofjustice/laa-amend-a-claim #114

6.2.11 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump org.springframework:spring-core from 4.3.30.RELEASE to 7.0.2

isaka/gocd #1345

4.3.30.RELEASE → 7.0.2 Major PR

Closed 6 months ago 1 comment

build(deps): Bump org.springframework:spring-core from 7.0.1 to 7.0.2

vmware/build-tools-for-vmware-aria #969

7.0.1 → 7.0.2 Patch PR

Open 6 months ago 1 comment

Bump org.springframework:spring-core from 6.2.12 to 7.0.2

PCGen/pcgen #7494

6.2.12 → 7.0.2 Major PR

Closed 6 months ago 2 comments

Bump the dependencies group with 55 updates

apache/logging-log4j2 #4000

6.2.9 → 7.0.2 Major PR

Closed 6 months ago 1 comment

Bump the all-minor-patch group across 1 directory with 13 updates

ehrbase/openEHR_SDK #706

6.2.12 → 6.2.14 Patch PR

Closed 6 months ago 1 comment

Bump the dev-dependencies group across 1 directory with 23 updates

NASA-PDS/registry-legacy-solr #224

6.1.14 → 7.0.1 Major PR

Open 7 months ago 3 comments

Bump the maven group across 22 directories with 13 updates

djdiakametavers/opencast #1

3.1.4.RELEASE → 3.2.9.RELEASE Minor PR

Open 7 months ago 1 comment

Bump org.springframework:spring-core from 6.2.11 to 7.0.1

danielscholl-osdu/legal #24

6.2.11 → 7.0.1 Major PR

Open 7 months ago 4 comments

Package Details

Name:	`org.springframework:spring-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.springframework:spring-core`
JSON API:	View JSON

Security Advisories

18

Active advisories

HIGH 8

MODERATE 10

View All maven Advisories

Package Information

Description:

Spring Core

Repository:	https://github.com/spring-projects/spring-framework
Homepage:	https://github.com/spring-projects/spring-framework
Latest Release:	`6.2.7` about 1 year ago
Dependent Repos:	157,893
Dependent Packages:	6,691
Ranking:	Top 0.0048% by dependent repos Top 0.009% by dependent pkgs

PR Status

Open 214 (47.9%)

Merged 79 (17.7%)

Closed 131 (29.3%)

PR Types

Major 111 (24.8%)

Minor 34 (7.6%)

Patch 279 (62.4%)

org.springframework:spring-core

Security Advisories

Spring Security and Spring Framework may not recognize certain paths that should be protected

Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework

Improper Limitation of a Pathname to a Restricted Directory in Spring Framework

Denial of Service in org.springframework:spring-core

Log entry injection in Spring Framework

Recent PRs

Package Details

Security Advisories

18

Package Information

PR Status

PR Types

`org.springframework:spring-core`