Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

org.springframework:spring-core

Ecosystem:
maven
Package URL:
pkg:maven/org.springframework:spring-core
Total PRs:
447 Dependabot PRs
Latest PR:
16 days ago
Unique Repositories:
205 repositories
Unique Repos (30 days):
4 repositories
Security Advisories
Spring Security and Spring Framework may not recognize certain paths that should be protected
GHSA-8crv-49fr-2h6j CVE-2016-5007 HIGH published over 7 years ago • updated 2 days ago
Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x (as well as other unsupported versions) rely on URL pa...
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
GHSA-rhcg-rwhx-qj3j CVE-2014-3578 MODERATE published about 4 years ago • updated about 2 months ago
Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files...
Denial of Service in org.springframework:spring-core
GHSA-rcpf-vj53-7h2m CVE-2018-1257 MODERATE published over 7 years ago • updated 29 days ago
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP...
Log entry injection in Spring Framework
GHSA-6gf2-pvqw-37ph CVE-2021-22060 MODERATE published over 4 years ago • updated 10 days ago
In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious input t...
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data
GHSA-f866-m9mv-2xr3 CVE-2011-2894 MODERATE published about 4 years ago • updated 2 days ago
Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects ...
View all 18 advisories
Recent PRs
RSS Feed
Bump the dev-dependencies group across 1 directory with 21 updates

NASA-PDS/registry-legacy-solr #216

6.1.14 → 6.2.11 Minor PR
Open 9 months ago
NASA-PDS
Bump the maven-dependencies group across 1 directory with 12 updates

danielmroczka/mongodb-librarian #16

6.2.8 → 6.2.11 Patch PR
Open 9 months ago 1 comment
danielmroczka
chore(deps): bump the production-minor-patch group with 7 updates

KristenLinek/ilax #2

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
KristenLinek
chore(deps): bump the production-minor-patch group across 1 directory with 8 updates

WilliamGarciae/symmetrie #7

6.2.5 → 6.2.11 Patch PR
Open 9 months ago 1 comment
WilliamGarciae
chore(deps): bump the production-minor-patch group across 1 directory with 8 updates

GerardFulaimin/Snackbar #8

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
GerardFulaimin
chore(deps): bump the production-minor-patch group across 1 directory with 8 updates

87126828/87126828 #8

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
87126828
chore: bump the production-minor-patch group across 1 directory with 8 updates

SAP/btp-environment-variable-access #288

6.2.5 → 6.2.11 Patch PR
Closed 9 months ago 1 comment
SAP
Bump org.springframework:spring-core from 6.2.2 to 6.2.11 in /client

ehrbase/openEHR_SDK #682

6.2.2 → 6.2.11 Patch PR
Closed 9 months ago 2 comments
ehrbase
Bump the all-minor-patch group across 1 directory with 25 updates

ehrbase/openEHR_SDK #680

6.2.2 → 6.2.11 Patch PR
Open 9 months ago
ehrbase
Bump the maven group across 1 directory with 2 updates

Tiqr/tiqr-java-connector #10

5.3.37 → 6.2.11 Major PR
Open 9 months ago
Tiqr
Bump the minor-and-patch group with 4 updates

basis-technology-corp/rosette-common-java-api #68

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
basis-technology-corp
Bump org.springframework:spring-core from 5.3.3 to 6.2.11 in /GoMeet

googleinterns/step271-2020 #61

5.3.3 → 6.2.11 Major PR
Open 9 months ago
googleinterns
Bump org.springframework:spring-core from 6.2.9 to 6.2.11 in the maven group across 1 directory

olech2412/db-vendo-wrapper #27

6.2.9 → 6.2.11 Patch PR
Closed 9 months ago 1 comment
olech2412
Bump org.springframework:spring-core from 6.2.10 to 6.2.11

Red5/red5-server #383

6.2.10 → 6.2.11 Patch PR
Open 9 months ago 1 comment
Red5
Bump org.springframework:spring-core from 6.2.2 to 6.2.11 in /client

Lifeforce-Digital/openEHR_SDK #3

6.2.2 → 6.2.11 Patch PR
Open 9 months ago
Lifeforce-Digital
Bump org.springframework:spring-core from 6.2.5 to 6.2.11 in /integration-spring

sarvex/MINA #72

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
sarvex
Bump org.springframework:spring-core from 6.2.5 to 6.2.11

oracle/nosql-spring-sdk #67

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
oracle
Bump org.springframework:spring-core from 6.2.10 to 6.2.11

EsupPortail/esup-pay #52

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
EsupPortail
build(deps): bump org.springframework:spring-core from 6.2.10 to 6.2.11

obiba/opal #4055

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
obiba
Bump org.springframework:spring-core from 6.2.10 to 6.2.11

craftercms/craftercms #8357

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago 1 comment
craftercms
build(deps): bump org.springframework:spring-core from 6.2.10 to 6.2.11

InseeFr/ARC #120

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
InseeFr
Bump org.springframework:spring-core from 6.2.10 to 6.2.11 in /examples/storm-jms-examples

apache/storm #8252

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
apache
Bump org.springframework:spring-core from 6.2.1 to 6.2.11

sweta-1011/spring-jms-sender #8

6.2.1 → 6.2.11 Patch PR
Merged 9 months ago
sweta-1011
Bump org.springframework:spring-core from 6.2.1 to 6.2.11

sweta-1011/spring-jms-receiver #8

6.2.1 → 6.2.11 Patch PR
Merged 9 months ago
sweta-1011
Bump org.springframework:spring-core from 6.2.9 to 6.2.11

magwas/konveyor #57

6.2.9 → 6.2.11 Patch PR
Open 9 months ago 1 comment
magwas
Bump org.springframework:spring-core from 6.2.7 to 6.2.11

folio-org/folio-di-support #48

6.2.7 → 6.2.11 Patch PR
Open 9 months ago
folio-org
Bump org.springframework:spring-core from 6.2.7 to 6.2.11

bootique/bootique-job #131

6.2.7 → 6.2.11 Patch PR
Merged 9 months ago
bootique
build(deps): bump org.springframework:spring-core from 6.2.2 to 6.2.11 in /java

tsmoreland/CredentialStore #259

6.2.2 → 6.2.11 Patch PR
Open 9 months ago
tsmoreland
chore(deps): bump org.springframework:spring-core from 6.2.10 to 6.2.11

citrusframework/citrus #1409

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
citrusframework
Bump org.springframework:spring-core from 6.2.1 to 6.2.11

hazelcast/hazelcast-wm #209

6.2.1 → 6.2.11 Patch PR
Open 9 months ago
hazelcast
Bump org.springframework:spring-core from 6.2.9 to 6.2.11 in /bidrag-domene

navikt/bidrag-felles #701

6.2.9 → 6.2.11 Patch PR
Open 9 months ago
navikt
Bump org.springframework:spring-core from 6.2.10 to 6.2.11

companieshouse/psc-statement-data-api #127

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
companieshouse
Bump org.springframework:spring-core from 6.2.0 to 6.2.11

hschott/ficum #75

6.2.0 → 6.2.11 Patch PR
Open 9 months ago
hschott
Bump org.springframework:spring-core from 6.2.9 to 6.2.11 in /judger

hzxie/voj #176

6.2.9 → 6.2.11 Patch PR
Open 9 months ago
hzxie
Bump org.springframework:spring-core from 6.2.9 to 6.2.11

ops4j/org.ops4j.pax.web #2100

6.2.9 → 6.2.11 Patch PR
Merged 9 months ago
ops4j
Bump org.springframework:spring-core from 6.2.5 to 6.2.11

scorpionTaj/TP1-dependency-injection-spring #2

6.2.5 → 6.2.11 Patch PR
Open 9 months ago
scorpionTaj
Build(deps): Bump org.springframework:spring-core from 6.2.8 to 6.2.11

RIPE-NCC/whois #1869

6.2.8 → 6.2.11 Patch PR
Closed 9 months ago 1 comment
RIPE-NCC
Bump org.springframework:spring-core from 6.2.8 to 6.2.11

CloudSlang/score #539

6.2.8 → 6.2.11 Patch PR
Open 9 months ago
CloudSlang
Bump org.springframework:spring-core from 6.2.8 to 6.2.11

zenbones/SmallMind #62

6.2.8 → 6.2.11 Patch PR
Open 9 months ago
zenbones
Bump org.springframework:spring-core from 6.2.7 to 6.2.11

RWS/tridion-dxd-mcp-server #2

6.2.7 → 6.2.11 Patch PR
Open 9 months ago
RWS
chore(deps): bump org.springframework:spring-core from 6.2.10 to 6.2.11

open-metadata/OpenMetadata #23428

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
open-metadata
build(deps): bump org.springframework:spring-core from 6.2.10 to 6.2.11

membrane/api-gateway #2149

6.2.10 → 6.2.11 Patch PR
Open 9 months ago 3 comments
membrane
Bump org.springframework:spring-core from 6.2.10 to 6.2.11

companieshouse/authcode-changed-consumer #17

6.2.10 → 6.2.11 Patch PR
Open 9 months ago
companieshouse
Bump org.springframework:spring-core from 5.3.0 to 6.2.11 in /packages/sub

CatTheCatch/Terragoat #30

5.3.0 → 6.2.11 Major PR
Open 9 months ago
CatTheCatch
Bump org.springframework:spring-core from 5.3.0 to 6.2.11 in /packages/sub

Daplanet/terragoat #9

5.3.0 → 6.2.11 Major PR
Open 9 months ago
Daplanet
Bump org.springframework:spring-core from 6.2.3 to 6.2.11

amazon-mq/upstreaming-activemq #35

6.2.3 → 6.2.11 Patch PR
Open 9 months ago
amazon-mq
Bump org.springframework:spring-core from 6.2.9 to 6.2.11 in /libraries/bundle-spring

ElmarDott/TP-CM #22

6.2.9 → 6.2.11 Patch PR
Open 9 months ago
ElmarDott
Bump org.springframework:spring-core from 6.2.9 to 6.2.11 in /HSUCommonParent

MarvinHsu/HSUCommon #98

6.2.9 → 6.2.11 Patch PR
Closed 9 months ago
MarvinHsu
Bump org.springframework:spring-core from 6.2.10 to 6.2.11

apache/activemq #1494

6.2.10 → 6.2.11 Patch PR
Merged 9 months ago
apache
Bump org.springframework:spring-core from 6.2.1 to 6.2.11

riasharmma/Spring- #2

6.2.1 → 6.2.11 Patch PR
Open 9 months ago
riasharmma
Package Details
Name: org.springframework:spring-core
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.springframework:spring-core
JSON API: View JSON
Security Advisories

18

Active advisories
HIGH 8
MODERATE 10
View All maven Advisories
Package Information
Description:

Spring Core

Repository: https://github.com/spring-projects/spring-framework
Homepage: https://github.com/spring-projects/spring-framework
Latest Release: 6.2.7
about 1 year ago
Dependent Repos: 157,893
Dependent Packages: 6,691
Ranking: Top 0.0048% by dependent repos Top 0.009% by dependent pkgs
PR Status
Open 214 (47.9%)
Merged 79 (17.7%)
Closed 131 (29.3%)
PR Types
Major 111 (24.8%)
Minor 34 (7.6%)
Patch 279 (62.4%)